https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:06:28 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-03002 bdu:2019-03002 https://cve.radiocsirt.org/vuln/bdu:2019-03002 https://cve.radiocsirt.org/vuln/certfr-2019-avi-397 certfr-2019-avi-397 https://cve.radiocsirt.org/vuln/certfr-2019-avi-397 https://cve.radiocsirt.org/vuln/cisco-sa-20190813-bluetooth <p>A weakness in the Bluetooth Basic Rate/Enhanced Data Rate (BR/EDR) protocol core specification exposes a vulnerability that could allow for an unauthenticated, adjacent attacker to perform a man-in-the-middle attack on an encrypted Bluetooth connection. The attack must be performed during negotiation or renegotiation of a paired device connection; existing sessions cannot be attacked. The issue could allow the attacker to reduce the entropy of the negotiated session key that is used to secure a Bluetooth connection between a paired device and a host device. An attacker who can successfully inject a malicious message into a Bluetooth connection during session negotiation or renegotiation could cause the strength of the session key to be susceptible to brute force attack. This advisory will be updated as additional information becomes available. There are no workarounds that address this vulnerability.</p> <p>A weakness in the Bluetooth Basic Rate/Enhanced Data Rate (BR/EDR) protocol core specification exposes a vulnerability that could allow for an unauthenticated, adjacent attacker to perform a man-in-the-middle attack on an encrypted Bluetooth connection. The attack must be performed during negotiation or renegotiation of a paired device connection; existing sessions cannot be attacked. The issue could allow the attacker to reduce the entropy of the negotiated session key that is used to secure a Bluetooth connection between a paired device and a host device. An attacker who can successfully inject a malicious message into a Bluetooth connection during session negotiation or renegotiation could cause the strength of the session key to be susceptible to brute force attack. This advisory will be updated as additional information becomes available. There are no workarounds that address this vulnerability.</p> https://cve.radiocsirt.org/vuln/cisco-sa-20190813-bluetooth https://cve.radiocsirt.org/vuln/euvd-2026-169440 EUVD-2026-169440 https://cve.radiocsirt.org/vuln/euvd-2026-169440 https://cve.radiocsirt.org/vuln/fkie_cve-2019-9506 <p>The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka &#34;KNOB&#34;) that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.</p> <p>The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka &#34;KNOB&#34;) that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-9506 https://cve.radiocsirt.org/vuln/ghsa-5xj4-2499-67mw <p>The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka &#34;KNOB&#34;) that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.</p> <p>The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka &#34;KNOB&#34;) that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.</p> https://cve.radiocsirt.org/vuln/ghsa-5xj4-2499-67mw https://cve.radiocsirt.org/vuln/gsd-2019-9506 gsd-2019-9506 https://cve.radiocsirt.org/vuln/gsd-2019-9506 https://cve.radiocsirt.org/vuln/opensuse-su-2019:2307-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:2307-1 https://cve.radiocsirt.org/vuln/rhsa-2019:2975 <p>kernel: hw: Spectre SWAPGS gadget vulnerability hardware: bluetooth: BR/EDR encryption key negotiation attacks (KNOB)</p> <p>kernel: hw: Spectre SWAPGS gadget vulnerability hardware: bluetooth: BR/EDR encryption key negotiation attacks (KNOB)</p> https://cve.radiocsirt.org/vuln/rhsa-2019:2975 https://cve.radiocsirt.org/vuln/suse-su-2019:2648-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/suse-su-2019:2648-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-9506 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:14.04:LTS: linux, Ubuntu:16.04:LTS: linux, Ubuntu:16.04:LTS: linux-aws, Ubuntu:16.04:LTS: linux-aws-hwe, Ubuntu:16.04:LTS: linux-gcp, Ubuntu:16.04:LTS: linux-hwe, Ubuntu:16.04:LTS: linux-oracle and 28 more</p> <p>The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka &#34;KNOB&#34;) that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:14.04:LTS: linux, Ubuntu:16.04:LTS: linux, Ubuntu:16.04:LTS: linux-aws, Ubuntu:16.04:LTS: linux-aws-hwe, Ubuntu:16.04:LTS: linux-gcp, Ubuntu:16.04:LTS: linux-hwe, Ubuntu:16.04:LTS: linux-oracle and 28 more</p> <p>The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka &#34;KNOB&#34;) that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-9506