1. CVE-Search
  2. CVE-2018-10910
ID CVE-2018-10910
Summary A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system. This situation could lead to the unauthorized pairing of certain Bluetooth devices without any form of authentication. Versions before bluez 5.51 are vulnerable.
References
Vulnerable Configurations
  • cpe:2.3:a:bluez:bluez:-:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:-:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.0:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.1:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.2:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.2:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.3:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.3:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.4:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.4:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.5:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.5:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.6:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.6:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.7:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.7:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.8:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.8:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.9:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.9:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.10:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.10:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.11:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.11:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.12:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.12:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.13:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.13:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.14:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.14:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.15:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.15:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.16:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.16:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.17:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.17:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.18:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.18:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.19:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.19:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.20:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.20:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.21:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.21:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.22:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.22:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.23:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.23:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.24:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.24:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.25:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.25:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.26:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.26:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.27:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.27:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.28:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.28:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.29:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.29:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.30:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.30:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.31:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.31:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.32:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.32:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.33:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.33:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.34:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.34:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.35:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.35:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.36:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.36:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.37:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.37:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.38:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.38:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.39:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.39:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.40:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.40:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.41:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.41:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.42:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.42:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.43:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.43:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.44:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.44:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.45:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.45:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.46:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.46:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.47:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.47:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.48:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.48:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.49:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.49:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.50:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.50:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.51:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.51:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.52:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.52:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.53:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.53:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.54:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.54:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.55:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.55:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.56:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.56:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.57:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.57:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.58:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.58:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.59:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.59:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.60:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.60:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.61:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.61:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.62:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.62:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.63:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.63:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.64:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.64:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.65:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.65:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.66:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.66:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.67:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.67:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.68:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.68:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.69:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.69:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.70:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.70:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.71:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.71:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.72:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.72:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.73:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.73:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.74:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.74:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.75:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.75:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.76:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.76:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.77:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.77:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.78:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.78:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.79:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.79:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.80:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.80:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.81:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.81:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.82:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.82:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.83:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.83:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.84:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.84:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.85:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.85:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.86:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.86:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.87:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.87:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.88:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.88:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.89:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.89:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.90:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.90:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.91:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.91:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.92:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.92:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.93:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.93:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.94:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.94:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.95:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.95:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.96:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.96:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.97:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.97:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.98:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.98:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.99:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.99:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.100:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.100:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:4.101:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:4.101:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.0:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.1:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.2:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.3:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.3:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.4:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.4:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.5:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.5:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.6:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.6:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.7:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.7:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.8:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.8:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.9:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.9:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.10:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.10:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.11:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.11:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.12:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.12:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.13:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.13:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.14:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.14:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.15:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.15:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.16:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.16:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.17:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.17:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.18:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.18:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.19:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.19:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.20:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.20:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.21:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.21:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.22:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.22:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.23:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.23:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.24:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.24:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.25:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.25:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.26:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.26:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.27:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.27:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.28:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.28:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.29:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.29:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.30:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.30:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.31:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.31:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.32:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.32:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.33:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.33:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.34:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.34:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.35:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.35:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.36:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.36:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.37:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.37:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.38:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.38:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.39:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.39:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.40:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.40:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.41:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.41:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.42:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.42:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.43:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.43:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.44:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.44:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.45:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.45:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.46:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.46:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.47:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.47:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.48:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.48:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.49:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.49:*:*:*:*:*:*:*
  • cpe:2.3:a:bluez:bluez:5.50:*:*:*:*:*:*:*
    cpe:2.3:a:bluez:bluez:5.50:*:*:*:*:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
CVSS
Base: 2.1 (as of 13-02-2023 - 04:51)
Impact:
Exploitability:
CWE CWE-863
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:N/A:N
redhat via4
advisories
  • bugzilla
    id 1606203
    title CVE-2018-10910 bluez: failure in disabling Bluetooth discoverability in certain cases may lead to the unauthorized pairing of Bluetooth devices
    oval
    OR
    • comment Red Hat Enterprise Linux must be installed
      oval oval:com.redhat.rhba:tst:20070304026
    • AND
      • comment Red Hat Enterprise Linux 7 is installed
        oval oval:com.redhat.rhba:tst:20150364027
      • OR
        • AND
          • comment bluez is earlier than 0:5.44-6.el7
            oval oval:com.redhat.rhsa:tst:20201101001
          • comment bluez is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20172685002
        • AND
          • comment bluez-cups is earlier than 0:5.44-6.el7
            oval oval:com.redhat.rhsa:tst:20201101003
          • comment bluez-cups is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20172685008
        • AND
          • comment bluez-hid2hci is earlier than 0:5.44-6.el7
            oval oval:com.redhat.rhsa:tst:20201101005
          • comment bluez-hid2hci is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20172685019
        • AND
          • comment bluez-libs is earlier than 0:5.44-6.el7
            oval oval:com.redhat.rhsa:tst:20201101007
          • comment bluez-libs is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20172685012
        • AND
          • comment bluez-libs-devel is earlier than 0:5.44-6.el7
            oval oval:com.redhat.rhsa:tst:20201101009
          • comment bluez-libs-devel is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20172685014
    rhsa
    id RHSA-2020:1101
    released 2020-03-31
    severity Low
    title RHSA-2020:1101: bluez security update (Low)
  • bugzilla
    id 1606203
    title CVE-2018-10910 bluez: failure in disabling Bluetooth discoverability in certain cases may lead to the unauthorized pairing of Bluetooth devices
    oval
    OR
    • comment Red Hat Enterprise Linux must be installed
      oval oval:com.redhat.rhba:tst:20070304026
    • AND
      • comment Red Hat Enterprise Linux 8 is installed
        oval oval:com.redhat.rhba:tst:20193384074
      • OR
        • AND
          • comment bluez is earlier than 0:5.50-3.el8
            oval oval:com.redhat.rhsa:tst:20201912001
          • comment bluez is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20172685002
        • AND
          • comment bluez-cups is earlier than 0:5.50-3.el8
            oval oval:com.redhat.rhsa:tst:20201912003
          • comment bluez-cups is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20172685008
        • AND
          • comment bluez-debugsource is earlier than 0:5.50-3.el8
            oval oval:com.redhat.rhsa:tst:20201912005
          • comment bluez-debugsource is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20201912006
        • AND
          • comment bluez-hid2hci is earlier than 0:5.50-3.el8
            oval oval:com.redhat.rhsa:tst:20201912007
          • comment bluez-hid2hci is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20172685019
        • AND
          • comment bluez-libs is earlier than 0:5.50-3.el8
            oval oval:com.redhat.rhsa:tst:20201912009
          • comment bluez-libs is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20172685012
        • AND
          • comment bluez-libs-devel is earlier than 0:5.50-3.el8
            oval oval:com.redhat.rhsa:tst:20201912011
          • comment bluez-libs-devel is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20172685014
        • AND
          • comment bluez-obexd is earlier than 0:5.50-3.el8
            oval oval:com.redhat.rhsa:tst:20201912013
          • comment bluez-obexd is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20201912014
    rhsa
    id RHSA-2020:1912
    released 2020-04-28
    severity Low
    title RHSA-2020:1912: bluez security update (Low)
rpms
  • bluez-0:5.44-6.el7
  • bluez-cups-0:5.44-6.el7
  • bluez-debuginfo-0:5.44-6.el7
  • bluez-hid2hci-0:5.44-6.el7
  • bluez-libs-0:5.44-6.el7
  • bluez-libs-devel-0:5.44-6.el7
  • bluez-0:5.50-3.el8
  • bluez-cups-0:5.50-3.el8
  • bluez-cups-debuginfo-0:5.50-3.el8
  • bluez-debuginfo-0:5.50-3.el8
  • bluez-debugsource-0:5.50-3.el8
  • bluez-hid2hci-0:5.50-3.el8
  • bluez-hid2hci-debuginfo-0:5.50-3.el8
  • bluez-libs-0:5.50-3.el8
  • bluez-libs-debuginfo-0:5.50-3.el8
  • bluez-libs-devel-0:5.50-3.el8
  • bluez-obexd-0:5.50-3.el8
  • bluez-obexd-debuginfo-0:5.50-3.el8
refmap via4
confirm https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10910
ubuntu USN-3856-1
Last major update 13-02-2023 - 04:51
Published 28-01-2019 - 15:29
Last modified 13-02-2023 - 04:51
Back to Top