Attacker Value

Unknown

(0 users assessed)

Exploitability

Unknown

(0 users assessed)

User Interaction

None

Privileges Required

None

Attack Vector

Adjacent_network

0

CVE-2019-9506

Disclosure Date: August 14, 2019 •

CVE-2019-9506 CVSS v3 Base Score: 8.1

Description

The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka “KNOB”) that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics

Data provided by the National Vulnerability Database (NVD)

Base Score:

8.1 High

Impact Score:

5.2

Exploitability Score:

2.8

Vector:

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector (AV):

Adjacent_network

Attack Complexity (AC):

Low

Privileges Required (PR):

None

User Interaction (UI):

None

Scope (S):

Unchanged

Confidentiality (C):

High

Integrity (I):

High

Availability (A):

None

Vendors

Products

References

Canonical

CVE-2019-9506 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9506)

Advisory

VU#918987 (https://www.kb.cert.org/vuls/id/918987)

https://www.bluetooth.com/security/statement-key-negotiation-of-bluetooth

20190816 APPLE-SA-2019-8-13-3 Additional information for APPLE-SA-2019-7-22-4 watchOS 5.3 (http://seclists.org/fulldisclosure/2019/Aug/14)

20190816 APPLE-SA-2019-8-13-1 Additional information for APPLE-SA-2019-7-22-2 macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra (http://seclists.org/fulldisclosure/2019/Aug/11)

20190816 APPLE-SA-2019-8-13-2 Additional information for APPLE-SA-2019-7-22-1 iOS 12.4 (http://seclists.org/fulldisclosure/2019/Aug/13)

20190816 APPLE-SA-2019-8-13-4 Additional information for APPLE-SA-2019-7-22-5 tvOS 12.4 (http://seclists.org/fulldisclosure/2019/Aug/15)

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190828-01-knob-en

USN-4115-1 (https://usn.ubuntu.com/4115-1)

USN-4118-1 (https://usn.ubuntu.com/4118-1)

[debian-lts-announce] 20190914 [SECURITY] [DLA 1919-1] linux-4.9 security update (https://lists.debian.org/debian-lts-announce/2019/09/msg00014.html)

[debian-lts-announce] 20190915 [SECURITY] [DLA 1919-2] linux-4.9 security update (https://lists.debian.org/debian-lts-announce/2019/09/msg00015.html)

[debian-lts-announce] 20190925 [SECURITY] [DLA 1930-1] linux security update (https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html)

USN-4147-1 (https://usn.ubuntu.com/4147-1)

https://access.redhat.com/errata/RHSA-2019:2975

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00037.html

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00036.html

https://access.redhat.com/errata/RHSA-2019:3076

https://access.redhat.com/errata/RHSA-2019:3055

https://access.redhat.com/errata/RHSA-2019:3089

https://access.redhat.com/errata/RHSA-2019:3187

https://access.redhat.com/errata/RHSA-2019:3165

https://access.redhat.com/errata/RHSA-2019:3217

https://access.redhat.com/errata/RHSA-2019:3220

https://access.redhat.com/errata/RHSA-2019:3231

https://access.redhat.com/errata/RHSA-2019:3218

https://access.redhat.com/errata/RHSA-2019:3309

https://access.redhat.com/errata/RHSA-2019:3517

https://access.redhat.com/errata/RHSA-2020:0204

Miscellaneous

http://www.cs.ox.ac.uk/publications/publication12404-abstract.html

https://www.usenix.org/conference/usenixsecurity19/presentation/antonioli

Rapid7

Technical Analysis