Strix
26.1K

CVE-2019-9506

HIGHCVSS 8.1/10EPSS 2.69%

Last modified

CVE-2019-9506 is a high-severity vulnerability rated 8.1/10 on the CVSS scale. The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.. EPSS estimates a 2.69% chance of exploitation in the next 30 days.

Description

The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.

Metrics

CVSS 3.1
8.1/10

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS Probability
2.69%

84.0th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
GoogleAndroidAll versions
AppleIphone Os12.4
AppleMac Os X10.12.6
AppleMac Os X10.13.6
AppleMac Os X10.14.5
AppleTvos12.4
AppleWatchos5.3
CanonicalUbuntu Linux16.04
CanonicalUbuntu Linux18.04
CanonicalUbuntu Linux19.04
DebianDebian Linux8.0
OpensuseLeap15.0
OpensuseLeap15.1
RedhatMrg Realtime2.0
RedhatVirtualization Host Eus4.2
RedhatEnterprise Linux8.0
RedhatEnterprise Linux Aus7.5
RedhatEnterprise Linux Eus7.6
RedhatEnterprise Linux Eus7.7
RedhatEnterprise Linux Eus8.1
RedhatEnterprise Linux Eus8.2
RedhatEnterprise Linux Eus8.4
RedhatEnterprise Linux For Real Time7
RedhatEnterprise Linux For Real Time8
RedhatEnterprise Linux For Real Time Eus8.2
RedhatEnterprise Linux For Real Time Eus8.4
RedhatEnterprise Linux For Real Time For Nfv7
RedhatEnterprise Linux For Real Time For Nfv8
RedhatEnterprise Linux For Real Time For Nfv Eus8.2
RedhatEnterprise Linux For Real Time For Nfv Eus8.4
RedhatEnterprise Linux Server7.0
RedhatEnterprise Linux Server Aus7.3
RedhatEnterprise Linux Server Aus7.4
RedhatEnterprise Linux Server Aus7.6
RedhatEnterprise Linux Server Aus7.7
RedhatEnterprise Linux Server Aus8.2
RedhatEnterprise Linux Server Aus8.4
RedhatEnterprise Linux Server Tus7.3
RedhatEnterprise Linux Server Tus7.4
RedhatEnterprise Linux Server Tus7.6
RedhatEnterprise Linux Server Tus7.7
RedhatEnterprise Linux Server Tus8.2
RedhatEnterprise Linux Server Tus8.4
RedhatEnterprise Linux Tus7.6
HuaweiAlp-Al00b Firmware< 9.1.0.333\(c00e333r2p1t8\)
HuaweiAres-Al00b Firmware< 9.1.0.160\(c00e160r2p5t8\)
HuaweiAres-Al10d Firmware< 9.1.0.160\(c00e160r2p5t8\)
HuaweiAres-Tl00c Firmware< 9.1.0.165\(c01e165r2p5t8\)
HuaweiAsoka-Al00ax Firmware< 9.1.1.181\(c00e48r6p1\)
HuaweiAtomu-L33 Firmware< 8.0.0.147\(c605custc605d1\)

Showing 50 of 206 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2019-9506?
The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.
How severe is CVE-2019-9506?
CVE-2019-9506 has a CVSS score of 8.1/10 (HIGH severity). The EPSS model estimates a 2.69% probability of exploitation in the next 30 days.
How do I fix CVE-2019-9506?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-9506?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST