CVE-2020-26558 Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authen...
MediumCVSS 4.2
EPSS 0.88%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. The attack methodology determines the Passkey value one bit at a time.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/bluez(Debian:12) | < 5.55-3.1 | 5.55-3.1 |
| debian/bluez(Debian:13) | < 5.55-3.1 | 5.55-3.1 |
| debian/bluez(Debian:14) | < 5.55-3.1 | 5.55-3.1 |
| debian/linux(Debian:12) | < 5.10.40-1 | 5.10.40-1 |
| debian/linux(Debian:13) | < 5.10.40-1 | 5.10.40-1 |
| debian/linux(Debian:14) | < 5.10.40-1 | 5.10.40-1 |
| bluetooth core specification | >= 2.1, <= 5.2 | No fix listed |
| fedoraproject fedora | = 34 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| Linux kernel | < 5.13 | 5.13 |
| intel ax210 firmware | All versions | No fix listed |
| intel ax201 firmware | All versions | No fix listed |
| intel ax200 firmware | All versions | No fix listed |
| intel ac 9560 firmware | All versions | No fix listed |
| intel ac 9462 firmware | All versions | No fix listed |
| intel ac 9461 firmware | All versions | No fix listed |
| intel ac 9260 firmware | All versions | No fix listed |
| intel ac 8265 firmware | All versions | No fix listed |
| intel ac 8260 firmware | All versions | No fix listed |
| intel ac 3168 firmware | All versions | No fix listed |
| intel ac 7265 firmware | All versions | No fix listed |
| intel ac 3165 firmware | All versions | No fix listed |
| intel ax1675 firmware | All versions | No fix listed |
| intel ax1650 firmware | All versions | No fix listed |
| intel ac 1550 firmware | All versions | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- USN-4989-1 vendor-advisory
- USN-4989-2 vendor-advisory
- USN-5018-1 vendor-advisory
- USN-5017-1 vendor-advisory
- USN-5046-1 vendor-advisory
- USN-5050-1 vendor-advisory
- USN-5299-1 vendor-advisory
- USN-5343-1 vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2020-26558 vendor-advisory
- kb.cert.org third-party-advisory us-government-resource
- [debian-lts-announce] 20210623 [SECURITY] [DLA 2690-1] linux-4.19 security update mailing-list third-party-advisory
- [debian-lts-announce] 20210623 [SECURITY] [DLA 2689-1] linux security update mailing-list third-party-advisory
- [debian-lts-announce] 20210626 [SECURITY] [DLA 2692-1] bluez security update mailing-list third-party-advisory
- FEDORA-2021-a35b44fd9f vendor-advisory
- GLSA-202209-16 third-party-advisory vendor-advisory
- www.bluetooth.com vendor-advisory
- DSA-4951 third-party-advisory vendor-advisory
- www.intel.com third-party-advisory
- www.intel.com third-party-advisory
- www.kb.cert.org
- bugs.debian.org issue-tracking