CVE-2023-24023: bluetooth bluetooth_core_specification

CVSS: 6.8v3.1MediumModified

AliasesUBUNTU-CVE-2023-24023DEBIAN-CVE-2023-24023

Published 28-11-2023Last modified 02-08-2024

Vulnerability summary

CVE-2023-24023 is a medium (CVSS 6.8) vulnerability in bluetooth bluetooth_core_specification. EPSS estimates a 1.30% chance of exploitation in the next 30 days, higher than 69.9% of scored vulnerabilities.

Overall risk

27/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.8/10

010

Medium · v3.1 (NVD)

EPSS score

1.30%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 19 · Related 16

RHSA-2024:2394 RHSA-2024:2950 RHSA-2024:3138 SUSE-SU-2024:2360-1 SUSE-SU-2024:2362-1 SUSE-SU-2024:2365-1+13 more

Timeline

28-11-2023
PublishedVulnerability first disclosed.
02-08-2024
Last modifiedVulnerability information updated.

Description

Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to discovery of the encryption key and live injection, aka BLUFFS.

CVSS metrics

4 scores · 4 sources · 1 version

v3.16.8

EPSS trend

Probability

1.30%

Chance of exploitation in the next 30 days

Percentile

70%

Versus all other CVEs

30-day change

0.00 pp

From 1.30% on 19-09-2026

19-09-202619-10-2026

EPSS score

1.30%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu117 products

linuxAll versions (No fix recorded) | < 4.4.0-253.287 | < 4.15.0-224.236 | < 5.4.0-177.197 | < 5.15.0-105.115
linux-allwinner-5.19All versions (No fix recorded)
linux-aws< 4.4.0-1130.136 | < 4.4.0-1168.183 | < 4.15.0-1167.180 | < 5.4.0-1123.133 | < 5.15.0-1060.66
linux-aws-5.0All versions (No fix recorded)
linux-aws-5.11All versions (No fix recorded)

linux-aws-5.13All versions (No fix recorded)
linux-aws-5.15< 5.15.0-1058.64~20.04.1
linux-aws-5.19All versions (No fix recorded)
linux-aws-5.3All versions (No fix recorded)
linux-aws-5.4< 5.4.0-1123.133~18.04.1
linux-aws-5.8All versions (No fix recorded)
linux-aws-6.2All versions (No fix recorded)
linux-aws-6.5All versions (No fix recorded)
linux-aws-fips< 4.15.0-2106.112 | All versions (No fix recorded) | < 5.4.0-1123.133+fips1 | < 5.15.0-1060.66+fips1
linux-aws-hwe< 4.15.0-1167.180~16.04.1
linux-azure< 4.15.0-1176.191~14.04.1 | < 4.15.0-1176.191~16.04.1 | All versions (No fix recorded) | < 5.4.0-1128.135 | < 5.15.0-1061.70
linux-azure-4.15< 4.15.0-1176.191
linux-azure-5.11All versions (No fix recorded)
linux-azure-5.13All versions (No fix recorded)
linux-azure-5.15< 5.15.0-1061.70~20.04.1
linux-azure-5.19All versions (No fix recorded)
linux-azure-5.3All versions (No fix recorded)
linux-azure-5.4< 5.4.0-1128.135~18.04.1
linux-azure-5.8All versions (No fix recorded)
linux-azure-6.2All versions (No fix recorded)
linux-azure-6.5All versions (No fix recorded)
linux-azure-edgeAll versions (No fix recorded)
linux-azure-fdeAll versions (No fix recorded) | < 5.15.0-1061.70.1
linux-azure-fde-5.15< 5.15.0-1114.123~20.04.1
linux-azure-fde-5.19All versions (No fix recorded)
linux-azure-fde-6.2All versions (No fix recorded)
linux-azure-fips< 4.15.0-2085.91 | All versions (No fix recorded) | < 5.4.0-1128.135+fips1 | < 5.15.0-1061.70+fips1
linux-bluefield< 5.4.0-1083.90 | < 5.15.0-1042.44
linux-fips< 4.4.0-1100.107 | All versions (No fix recorded) | < 4.15.0-1122.133 | < 5.4.0-1097.107 | < 5.15.0-105.115+fips1
linux-gcp< 4.15.0-1161.178~16.04.1 | All versions (No fix recorded) | < 5.4.0-1127.136 | < 5.15.0-1058.66
linux-gcp-4.15< 4.15.0-1161.178
linux-gcp-5.11All versions (No fix recorded)
linux-gcp-5.13All versions (No fix recorded)
linux-gcp-5.15< 5.15.0-1058.66~20.04.1
linux-gcp-5.19All versions (No fix recorded)
linux-gcp-5.3All versions (No fix recorded)
linux-gcp-5.4< 5.4.0-1127.136~18.04.1
linux-gcp-5.8All versions (No fix recorded)
linux-gcp-6.2All versions (No fix recorded)
linux-gcp-6.5All versions (No fix recorded)
linux-gcp-fips< 4.15.0-2069.74 | All versions (No fix recorded) | < 5.4.0-1127.136+fips1 | < 5.15.0-1058.66+fips1
linux-gkeAll versions (No fix recorded) | < 5.15.0-1057.62
linux-gke-4.15All versions (No fix recorded)
linux-gke-5.15All versions (No fix recorded)
linux-gke-5.4All versions (No fix recorded)
linux-gkeop< 5.4.0-1090.94 | < 5.15.0-1043.50
linux-gkeop-5.15< 5.15.0-1043.50~20.04.1
linux-gkeop-5.4All versions (No fix recorded)
linux-hwe< 4.15.0-224.236~16.04.1 | All versions (No fix recorded)
linux-hwe-5.11All versions (No fix recorded)
linux-hwe-5.13All versions (No fix recorded)
linux-hwe-5.15< 5.15.0-105.115~20.04.1
linux-hwe-5.19All versions (No fix recorded)
linux-hwe-5.4< 5.4.0-177.197~18.04.1
linux-hwe-5.8All versions (No fix recorded)
linux-hwe-6.2All versions (No fix recorded)
linux-hwe-6.5All versions (No fix recorded)
linux-hwe-edgeAll versions (No fix recorded)
linux-ibm< 5.4.0-1070.75 | < 5.15.0-1053.56
linux-ibm-5.15< 5.15.0-1053.56~20.04.1
linux-ibm-5.4< 5.4.0-1070.75~18.04.1
linux-intel-5.13All versions (No fix recorded)
linux-intel-iot-realtime< 5.15.0-1053.55
linux-intel-iotg< 5.15.0-1055.61
linux-intel-iotg-5.15< 5.15.0-1055.61~20.04.1
linux-iot< 5.4.0-1035.36
linux-kvm< 4.4.0-1131.141 | < 4.15.0-1151.156 | < 5.4.0-1111.118 | < 5.15.0-1057.62
linux-lowlatency< 5.15.0-105.115
linux-lowlatency-hwe-5.15< 5.15.0-105.115~20.04.1
linux-lowlatency-hwe-5.19All versions (No fix recorded)
linux-lowlatency-hwe-6.2All versions (No fix recorded)
linux-lowlatency-hwe-6.5All versions (No fix recorded)
linux-lts-xenial< 4.4.0-253.287~14.04.1
linux-nvidia< 5.15.0-1053.54
linux-nvidia-6.2All versions (No fix recorded)
linux-nvidia-6.5< 6.5.0-1014.14
linux-nvidia-tegra< 5.15.0-1025.25
linux-nvidia-tegra-5.15< 5.15.0-1025.25~20.04.1
linux-nvidia-tegra-igx< 5.15.0-1012.12
linux-oemAll versions (No fix recorded)
linux-oem-5.10All versions (No fix recorded)
linux-oem-5.13All versions (No fix recorded)
linux-oem-5.14All versions (No fix recorded)
linux-oem-5.17All versions (No fix recorded)
linux-oem-5.6All versions (No fix recorded)
linux-oem-6.0All versions (No fix recorded)
linux-oem-6.1All versions (No fix recorded)
linux-oem-6.5All versions (No fix recorded)
linux-oracle< 4.15.0-1130.141~16.04.1 | < 4.15.0-1130.141 | < 5.4.0-1122.131 | < 5.15.0-1058.64
linux-oracle-5.0All versions (No fix recorded)
linux-oracle-5.11All versions (No fix recorded)
linux-oracle-5.13All versions (No fix recorded)
linux-oracle-5.15< 5.15.0-1058.64~20.04.1
linux-oracle-5.3All versions (No fix recorded)
linux-oracle-5.4< 5.4.0-1122.131~18.04.1
linux-oracle-5.8All versions (No fix recorded)
linux-oracle-6.5All versions (No fix recorded)
linux-raspi< 5.4.0-1107.119 | < 5.15.0-1053.56 | < 6.7.0-1001.1
linux-raspi-5.4< 5.4.0-1107.119~18.04.1
linux-raspi-realtimeAll versions (No fix recorded)
linux-raspi2All versions (No fix recorded)
linux-realtimeAll versions (No fix recorded) | < 5.15.0-1061.69
linux-riscvAll versions (No fix recorded)
linux-riscv-5.11All versions (No fix recorded)
linux-riscv-5.15< 5.15.0-1056.60~20.04.1
linux-riscv-5.19All versions (No fix recorded)
linux-riscv-5.8All versions (No fix recorded)
linux-riscv-6.5All versions (No fix recorded)
linux-starfive-5.19All versions (No fix recorded)
linux-starfive-6.2All versions (No fix recorded)
linux-starfive-6.5All versions (No fix recorded)
linux-xilinx-zynqmp< 5.4.0-1042.46 | < 5.15.0-1030.34

Show all 117

Microsoft9 products

windows_10_1809< 10.0.17763.5122
windows_10_21h2< 10.0.19043.3693
windows_10_22h2< 10.0.19045.3693
windows_11_21h2< 10.0.22000.2600
windows_11_22h2< 10.0.22621.2715

Show all 9

Bluetooth1 product

bluetooth_core_specification≥ 4.2, ≤ 5.4

Debian1 product

linux< 6.1.76-1 | < 6.6.9-1

4 vendors · 128 products

References

12 links

www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/bluffs-vulnerability/REPORTVendor Advisory
dl.acm.org/doi/10.1145/3576915.3623066REPORTTechnical DescriptionThird Party Advisory
ubuntu.com/security/CVE-2023-24023REPORT
media.ccc.de/v/37c3-12342-bluffs_bluetooth_forward_and_future_secrecy_attacks_and_defensesREPORT
gitlab.com/redhat/centos-stream/src/kernel/centos-stream-9/-/merge_requests/3732REPORT
www.cve.org/CVERecord?id=CVE-2023-24023REPORT
ubuntu.com/security/notices/USN-6739-1Advisory
ubuntu.com/security/notices/USN-6740-1Advisory
ubuntu.com/security/notices/USN-6741-1Advisory
ubuntu.com/security/notices/USN-6742-1Advisory

Show all 12 references

ubuntu.com/security/notices/USN-6742-2Advisory
security-tracker.debian.org/tracker/CVE-2023-24023Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities