CVE-2018-5383

Published: 07 August 2018

Bluetooth firmware or operating system software drivers in macOS versions before 10.13, High Sierra and iOS versions before 11.4, and Android versions before the 2018-06-05 patch may not sufficiently validate elliptic curve parameters used to generate public keys during a Diffie-Hellman key exchange, which may allow a remote attacker to obtain the encryption key used by the device.

From the Ubuntu security team

Eli Biham and Lior Neumann discovered that the Bluetooth implementation in the Linux kernel did not properly validate elliptic curve parameters during Diffie-Hellman key exchange in some situations. An attacker could use this to expose sensitive information.

Priority

Medium

CVSS 3 base score: 6.8

Status

Notes

bluetooth firmware blobs need version 20.60 and higher
Intel recommended to use the latest FW which is now 20.70
Intel page says "Any Linux kernel version 3.19 and higher will
also need an update.", adding kernel packages.

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5383
• http://www.cs.technion.ac.il/~biham/BT/
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00128.html
• https://ubuntu.com/security/notices/USN-4094-1
• https://ubuntu.com/security/notices/USN-4095-1
• https://ubuntu.com/security/notices/USN-4095-2
• https://ubuntu.com/security/notices/USN-4118-1
• https://ubuntu.com/security/notices/USN-4351-1
• NVD
• Launchpad
• Debian

Bugs

• https://bugzilla.novell.com/show_bug.cgi?id=CVE-2018-5383
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-5383