● CVE — High
CVE-2019-9506
Vendordebian, canonical, redhat, opensuse, googleProductdebian linux, ubuntu linux, enterprise linux, enterprise linux eus, enterprise linux server, enterprise linux server aus, enterprise linux server tus, leap, enterprise linux for real time, enterprise linux for real time for nfv, mrg realtime, android, enterprise linux aus, iphone os, mac os x, tvos, watchos, alp-al00b firmware, enterprise linux tus, ares-al00b firmware, ares-al10d firmware, ares-tl00c firmware, enterprise linux for real time eus, enterprise linux for real time for nfv eus, virtualization host eusDiscoveredAug 14, 2019UpdatedNov 21, 2024
The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.