CVE-2019-9506
High
Description
The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.
SeverityHigh
CVSS8.1
Exploit probability—
Product
Google Android
PublishedAug 14, 2019
First seenAug 14, 2019
Weakness typeCWE-310CWE-310
How to fix
Update
- huawei alp-al00b_firmware9.1.0.333\(c00e333r2p1t8\) or later
- huawei ares-al00b_firmware9.1.0.160\(c00e160r2p5t8\) or later
- huawei ares-al10d_firmware9.1.0.160\(c00e160r2p5t8\) or later
- huawei ares-tl00c_firmware9.1.0.165\(c01e165r2p5t8\) or later
- huawei asoka-al00ax_firmware9.1.1.181\(c00e48r6p1\) or later
- huawei atomu-l33_firmware8.0.0.147\(c605custc605d1\) or later
- huawei atomu-l41_firmware8.0.0.153\(c461custc461d1\) or later
- huawei atomu-l42_firmware8.0.0.155\(c636custc636d1\) or later
- huawei bla-al00b_firmware9.1.0.329\(c786e320r2p1t8\) or later
- huawei bla-l29c_firmware9.1.0.300\(c605e2r1p12t8\), 9.1.0.306\(c185e2r1p13t8\), 9.1.0.306\(c432e4r1p11t8\), 9.1.0.306\(c636e2r1p13t8\), 9.1.0.307\(c635e4r1p13t8\) or later
- huawei bla-tl00b_firmware9.1.0.329\(c01e320r1p1t8\) or later
- huawei barca-al00_firmware8.0.0.366\(c00\) or later
Vendor advisories
- usn.ubuntu.com/4115-1/
- usn.ubuntu.com/4118-1/
- usn.ubuntu.com/4147-1/
- access.redhat.com/errata/RHSA-2019:2975
- access.redhat.com/errata/RHSA-2019:3076
- access.redhat.com/errata/RHSA-2019:3055
- access.redhat.com/errata/RHSA-2019:3089
- access.redhat.com/errata/RHSA-2019:3187
- access.redhat.com/errata/RHSA-2019:3165
- access.redhat.com/errata/RHSA-2019:3217
- access.redhat.com/errata/RHSA-2019:3220
- access.redhat.com/errata/RHSA-2019:3231
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| google android | No range specified | — |
| apple iphone_os | 12.4 | — |
| apple mac_os_x | 10.12.6, 10.13.6, 10.14.5 | — |
| apple tvos | 12.4 | — |
| apple watchos | 5.3 | — |
| canonical ubuntu_linux | 16.04, 18.04, 19.04 | — |
| debian debian_linux | 8.0 | — |
| opensuse leap | 15.0, 15.1 | — |
| redhat mrg_realtime | 2.0 | — |
| redhat virtualization_host_eus | 4.2 | — |
| redhat enterprise_linux | 8.0 | — |
| redhat enterprise_linux_aus | 7.5 | — |
| redhat enterprise_linux_eus | 7.6, 7.7, 8.1, 8.2, 8.4 | — |
| redhat enterprise_linux_for_real_time | 7, 8 | — |
| redhat enterprise_linux_for_real_time_eus | 8.2, 8.4 | — |
| redhat enterprise_linux_for_real_time_for_nfv | 7, 8 | — |
| redhat enterprise_linux_for_real_time_for_nfv_eus | 8.2, 8.4 | — |
| redhat enterprise_linux_server | 7.0 | — |
| redhat enterprise_linux_server_aus | 7.3, 7.4, 7.6, 7.7, 8.2, 8.4 | — |
| redhat enterprise_linux_server_tus | 7.3, 7.4, 7.6, 7.7, 8.2, 8.4 | — |
| redhat enterprise_linux_tus | 7.6 | — |
| huawei alp-al00b_firmware | v < 9.1.0.333\(c00e333r2p1t8\) | 9.1.0.333\(c00e333r2p1t8\) |
| huawei ares-al00b_firmware | v < 9.1.0.160\(c00e160r2p5t8\) | 9.1.0.160\(c00e160r2p5t8\) |
| huawei ares-al10d_firmware | v < 9.1.0.160\(c00e160r2p5t8\) | 9.1.0.160\(c00e160r2p5t8\) |
| huawei ares-tl00c_firmware | v < 9.1.0.165\(c01e165r2p5t8\) | 9.1.0.165\(c01e165r2p5t8\) |
| huawei asoka-al00ax_firmware | v < 9.1.1.181\(c00e48r6p1\) | 9.1.1.181\(c00e48r6p1\) |
| huawei atomu-l33_firmware | v < 8.0.0.147\(c605custc605d1\) | 8.0.0.147\(c605custc605d1\) |
| huawei atomu-l41_firmware | v < 8.0.0.153\(c461custc461d1\) | 8.0.0.153\(c461custc461d1\) |
| huawei atomu-l42_firmware | v < 8.0.0.155\(c636custc636d1\) | 8.0.0.155\(c636custc636d1\) |
| huawei bla-al00b_firmware | v < 9.1.0.329\(c786e320r2p1t8\) | 9.1.0.329\(c786e320r2p1t8\) |
| huawei bla-l29c_firmware | v < 9.1.0.300\(c605e2r1p12t8\), v < 9.1.0.306\(c185e2r1p13t8\), v < 9.1.0.306\(c432e4r1p11t8\), v < 9.1.0.306\(c636e2r1p13t8\), v < 9.1.0.307\(c635e4r1p13t8\) | 9.1.0.300\(c605e2r1p12t8\), 9.1.0.306\(c185e2r1p13t8\), 9.1.0.306\(c432e4r1p11t8\), 9.1.0.306\(c636e2r1p13t8\), 9.1.0.307\(c635e4r1p13t8\) |
| huawei bla-tl00b_firmware | v < 9.1.0.329\(c01e320r1p1t8\) | 9.1.0.329\(c01e320r1p1t8\) |
| huawei barca-al00_firmware | v < 8.0.0.366\(c00\) | 8.0.0.366\(c00\) |
| huawei berkeley-al20_firmware | v < 9.1.0.333\(c00e333r2p1t8\) | 9.1.0.333\(c00e333r2p1t8\) |
| huawei berkeley-l09_firmware | v < 9.1.0.332\(c432e5r1p13t8\), v < 9.1.0.350\(c10e3r1p14t8\), v < 9.1.0.350\(c636e4r1p13t8\) | 9.1.0.332\(c432e5r1p13t8\), 9.1.0.350\(c10e3r1p14t8\), 9.1.0.350\(c636e4r1p13t8\) |
| huawei berkeley-tl10_firmware | v < 9.1.0.333\(c01e333r1p1t8\) | 9.1.0.333\(c01e333r1p1t8\) |
| huawei cairogo-l22_firmware | v < cairogo-l22c461b153 | cairogo-l22c461b153 |
| huawei charlotte-l29c_firmware | v < 9.1.0.311\(c605e2r1p11t8\), v < 9.1.0.325\(c185e4r1p11t8\), v < 9.1.0.325\(c636e2r1p12t8\), v < 9.1.0.328\(c432e5r1p9t8\), v < 9.1.0.328\(c782e10r1p9t8\) | 9.1.0.311\(c605e2r1p11t8\), 9.1.0.325\(c185e4r1p11t8\), 9.1.0.325\(c636e2r1p12t8\), 9.1.0.328\(c432e5r1p9t8\), 9.1.0.328\(c782e10r1p9t8\) |
| huawei columbia-al10b_firmware | v < 9.1.0.333\(c00e333r1p1t8\) | 9.1.0.333\(c00e333r1p1t8\) |
| huawei columbia-al10i_firmware | v < 9.1.0.335\(c675e8r1p9t8\) | 9.1.0.335\(c675e8r1p9t8\) |
| huawei columbia-l29d_firmware | v < 9.1.0.350\(c10e5r1p14t8\), v < 9.1.0.350\(c185e3r1p12t8\), v < 9.1.0.350\(c461e3r1p11t8\), v < 9.1.0.350\(c636e3r1p13t8\), v < 9.1.0.351\(c432e5r1p13t8\) | 9.1.0.350\(c10e5r1p14t8\), 9.1.0.350\(c185e3r1p12t8\), 9.1.0.350\(c461e3r1p11t8\), 9.1.0.350\(c636e3r1p13t8\), 9.1.0.351\(c432e5r1p13t8\) |
| huawei columbia-tl00d_firmware | v < 8.1.0.186\(c01gt\) | 8.1.0.186\(c01gt\) |
| huawei cornell-al00a_firmware | v < 9.1.0.333\(c00e333r1p1t8\) | 9.1.0.333\(c00e333r1p1t8\) |
| huawei cornell-al00i_firmware | v < 9.1.0.363\(c675e3r1p9t8\) | 9.1.0.363\(c675e3r1p9t8\) |
| huawei cornell-al00ind_firmware | v < 8.2.0.141\(c675custc675d1gt\) | 8.2.0.141\(c675custc675d1gt\) |
| huawei cornell-al10ind_firmware | v < 9.1.0.363\(c675e2r1p9t8\) | 9.1.0.363\(c675e2r1p9t8\) |
| huawei cornell-l29a_firmware | v < 9.1.0.336\(c636e2r1p12t8\), v < 9.1.0.341\(c185e1r1p9t8\), v < 9.1.0.342\(c461e1r1p9t8\), v < 9.1.0.347\(c432e1r1p9t8\) | 9.1.0.336\(c636e2r1p12t8\), 9.1.0.341\(c185e1r1p9t8\), 9.1.0.342\(c461e1r1p9t8\), 9.1.0.347\(c432e1r1p9t8\) |
| huawei cornell-tl10b_firmware | v < 9.1.0.333\(c01e333r1p1t8\) | 9.1.0.333\(c01e333r1p1t8\) |
| huawei dubai-al00a_firmware | v < 8.2.0.190\(c00r2p2\) | 8.2.0.190\(c00r2p2\) |
| huawei dura-al00a_firmware | v < 1.0.0.182\(c00\) | 1.0.0.182\(c00\) |
| huawei dura-tl00a_firmware | v < 1.0.0.176\(c01\) | 1.0.0.176\(c01\) |
| huawei emily-l29c_firmware | 8.1.0.156\(c605\), v < 9.1.0.311\(c461e2r1p11t8\), v < 9.1.0.325\(c185e2r1p12t8\), v < 9.1.0.325\(c636e7r1p13t8\), v < 9.1.0.326\(c635e2r1p11t8\), v < 9.1.0.328\(c432e7r1p11t8\) | 9.1.0.311\(c461e2r1p11t8\), 9.1.0.325\(c185e2r1p12t8\), 9.1.0.325\(c636e7r1p13t8\), 9.1.0.326\(c635e2r1p11t8\), 9.1.0.328\(c432e7r1p11t8\) |
| huawei ever-l29b_firmware | v < 9.1.0.338\(c185e3r3p1\) | 9.1.0.338\(c185e3r3p1\) |
| huawei figo-l23_firmware | v < 9.1.0.160\(c605e6r1p5t8\) | 9.1.0.160\(c605e6r1p5t8\) |
| huawei figo-l31_firmware | 8.0.0.122d\(c652\), v < 9.1.0.122\(c09e7r1p5t8\), v < 9.1.0.137\(c33e8r1p5t8\), v < 9.1.0.137\(c530e8r1p5t8\), v < 9.1.0.158\(c432e8r1p5t8\), v < 9.1.0.165\(c10e8r1p5t8\) | 9.1.0.122\(c09e7r1p5t8\), 9.1.0.137\(c33e8r1p5t8\), 9.1.0.137\(c530e8r1p5t8\), 9.1.0.158\(c432e8r1p5t8\), 9.1.0.165\(c10e8r1p5t8\) |
| huawei figo-tl10b_firmware | v < 9.1.0.130\(c01e115r2p8t8\) | 9.1.0.130\(c01e115r2p8t8\) |
| huawei florida-al20b_firmware | v < 9.1.0.128\(c00e112r1p6t8\) | 9.1.0.128\(c00e112r1p6t8\) |
| huawei florida-l21_firmware | v < 9.1.0.150\(c185e6r1p5t8\), v < 9.1.0.150\(c432e6r1p5t8\) | 9.1.0.150\(c185e6r1p5t8\), 9.1.0.150\(c432e6r1p5t8\) |
| huawei florida-l22_firmware | v < 9.1.0.150\(c636e6r1p5t8\) | 9.1.0.150\(c636e6r1p5t8\) |
| huawei florida-l23_firmware | v < 9.1.0.154\(c605e7r1p2t8\) | 9.1.0.154\(c605e7r1p2t8\) |
| huawei florida-tl10b_firmware | v < 9.1.0.128\(c01e112r1p6t8\) | 9.1.0.128\(c01e112r1p6t8\) |
| huawei honor_20_firmware | v < 9.1.0.143\(c675e8r2p1\), v < 9.1.0.149\(c675e8r2p1\) | 9.1.0.143\(c675e8r2p1\), 9.1.0.149\(c675e8r2p1\) |
| huawei honor_20_pro_firmware | v < 9.1.0.154\(c185e2r5p1\) | 9.1.0.154\(c185e2r5p1\) |
| huawei mate_20_firmware | No range specified | — |
| huawei mate_20_pro_firmware | No range specified | — |
| huawei mate_20_x_firmware | No range specified | — |
| huawei p_smart_firmware | No range specified | — |
| huawei p_smart_2019_firmware | No range specified | — |
| huawei p20_firmware | No range specified | — |
| huawei p20_pro_firmware | No range specified | — |
| huawei p30_firmware | No range specified | — |
| huawei p30_pro_firmware | No range specified | — |
| huawei y5_2018_firmware | No range specified | — |
| huawei y5_lite_firmware | No range specified | — |
| huawei y6_2019_firmware | No range specified | — |
| huawei y6_prime_2018_firmware | No range specified | — |
| huawei y6_pro_2019_firmware | No range specified | — |
| huawei y7_2019_firmware | No range specified | — |
| huawei y9_2019_firmware | No range specified | — |
| huawei nova_3_firmware | No range specified | — |
| huawei nova_4_firmware | No range specified | — |
| huawei nova_5_firmware | No range specified | — |
| huawei nova_5i_pro_firmware | No range specified | — |
| huawei nova_lite_3_firmware | No range specified | — |
| huawei harry-al00c_firmware | No range specified | — |
| huawei harry-al10b_firmware | No range specified | — |
| huawei harry-tl00c_firmware | No range specified | — |
| huawei hima-l29c_firmware | No range specified | — |
| huawei honor_10_lite_firmware | No range specified | — |
| huawei honor_8a_firmware | No range specified | — |
| huawei honor_8x_firmware | No range specified | — |
| huawei honor_view_10_firmware | No range specified | — |
| huawei honor_view_20_firmware | No range specified | — |
| huawei jakarta-al00a_firmware | No range specified | — |
| huawei johnson-tl00d_firmware | No range specified | — |
| huawei johnson-tl00f_firmware | No range specified | — |
| huawei katyusha-al00a_firmware | No range specified | — |
| huawei laya-al00ep_firmware | No range specified | — |
| huawei leland-l21a_firmware | No range specified | — |
| huawei leland-l31a_firmware | No range specified | — |
| huawei leland-l32a_firmware | No range specified | — |
| huawei leland-l32c_firmware | No range specified | — |
| huawei leland-l42a_firmware | No range specified | — |
| huawei leland-l42c_firmware | No range specified | — |
| huawei leland-tl10b_firmware | No range specified | — |
| huawei leland-tl10c_firmware | No range specified | — |
| huawei lelandp-al00c_firmware | No range specified | — |
| huawei lelandp-al10b_firmware | No range specified | — |
| huawei lelandp-al10d_firmware | No range specified | — |
| huawei lelandp-l22a_firmware | No range specified | — |
| huawei lelandp-l22c_firmware | No range specified | — |
| huawei lelandp-l22d_firmware | No range specified | — |
| huawei london-al40ind_firmware | No range specified | — |
| huawei madrid-al00a_firmware | No range specified | — |
| huawei madrid-tl00a_firmware | No range specified | — |
| huawei neo-al00d_firmware | No range specified | — |
| huawei paris-al00ic_firmware | No range specified | — |
| huawei paris-l21b_firmware | No range specified | — |
| huawei paris-l21meb_firmware | No range specified | — |
| huawei paris-l29b_firmware | No range specified | — |
| huawei potter-al00c_firmware | No range specified | — |
| huawei potter-al10a_firmware | No range specified | — |
| huawei princeton-al10b_firmware | No range specified | — |
| huawei princeton-al10d_firmware | No range specified | — |
| huawei princeton-tl10c_firmware | No range specified | — |
| huawei sydney-al00_firmware | No range specified | — |
| huawei sydney-l21_firmware | No range specified | — |
| huawei sydney-l21br_firmware | No range specified | — |
| huawei sydney-l22_firmware | No range specified | — |
| huawei sydney-l22br_firmware | No range specified | — |
| huawei sydney-tl00_firmware | No range specified | — |
| huawei sydneym-al00_firmware | No range specified | — |
| huawei sydneym-l01_firmware | No range specified | — |
| huawei sydneym-l03_firmware | No range specified | — |
| huawei sydneym-l21_firmware | No range specified | — |
| huawei sydneym-l22_firmware | No range specified | — |
| huawei sydneym-l23_firmware | No range specified | — |
| huawei tony-al00b_firmware | No range specified | — |
| huawei tony-tl00b_firmware | No range specified | — |
| huawei yale-al00a_firmware | No range specified | — |
| huawei yale-al50a_firmware | No range specified | — |
| huawei yale-l21a_firmware | No range specified | — |
| huawei yale-l61c_firmware | No range specified | — |
| huawei yale-tl00b_firmware | No range specified | — |
| huawei yalep-al10b_firmware | No range specified | — |
| huawei imanager_neteco_firmware | No range specified | — |
| huawei imanager_neteco_6000_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.