admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-06-08 05:58:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update description and add Bluetooth SIG reference

Browse Source
This commit is contained in:
Art Manion 2019-08-14 10:33:56 -04:00
parent 15247bea84
commit 782fcb946a
No known key found for this signature in database
GPG Key ID: 8DA47961FB165110
1 changed files with 9 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
2019/9xxx/CVE-2019-9506.json
View File

@ -5,7 +5,7 @@
"DATE_PUBLIC": "2019-08-14", "DATE_PUBLIC": "2019-08-14",
"ID": "CVE-2019-9506", "ID": "CVE-2019-9506",
"STATE": "PUBLIC", "STATE": "PUBLIC",
"TITLE": "Blutooth BR/EDR specification does not specify sufficient encryption key entropy" "TITLE": "Blutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiation"
}, },
"affects": { "affects": {
"vendor": { "vendor": {
@ -46,7 +46,7 @@
"description_data": [ "description_data": [
{ {
"lang": "eng", "lang": "eng",
"value": "The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low entropy in the encryption key negotiation protocol to allow practical brute-force attacks (aka \"KNOB\"). A successful attack can decrypt traffic and inject arbitrary ciphertext without the victim noticing." "value": "The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka \"KNOB\") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing."
} }
] ]
}, },
@ -97,8 +97,13 @@
"name": "https://www.usenix.org/conference/usenixsecurity19/presentation/antonioli", "name": "https://www.usenix.org/conference/usenixsecurity19/presentation/antonioli",
"refsource": "MISC", "refsource": "MISC",
"url": "https://www.usenix.org/conference/usenixsecurity19/presentation/antonioli" "url": "https://www.usenix.org/conference/usenixsecurity19/presentation/antonioli"
} },
] {
"name": "https://www.bluetooth.com/security/statement-key-negotiation-of-bluetooth/",
"refsource": "CONFIRM",
"url": "https://www.bluetooth.com/security/statement-key-negotiation-of-bluetooth/"
}
]
}, },
"source": { "source": {
"advisory": "VU#918987", "advisory": "VU#918987",