CVE-2018-10910: Medium severity BlueZ BlueZ vulnerability
A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system. This situation could lead to the unauthorized pairing of certain Bluetooth devices without any form of authentication. Versions before bluez 5.51 are vulnerable.
Other sources
A bug in bluez prevents the disabling of Bluetooth discoverability. In certain situations, this flaw could potentially lead to the unauthorized pairing of Bluetooth devices.
References: https://bugzilla.redhat.com/showbug.cgi?id=1602985
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2018-10910?
CVE-2018-10910 is a vulnerability in Bluez that allows for the Bluetooth Discoverable state to be set to on when no Bluetooth agent is registered with the system, potentially leading to unauthorized pairing of Bluetooth devices.
Which versions of Bluez are vulnerable to CVE-2018-10910?
Versions before Bluez 5.51 are vulnerable to CVE-2018-10910.
What is the severity of CVE-2018-10910?
The severity of CVE-2018-10910 is medium with a severity value of 3.3.
How can I fix CVE-2018-10910?
To fix CVE-2018-10910, update Bluez to version 5.51 or higher.
Where can I find more information about CVE-2018-10910?
You can find more information about CVE-2018-10910 on the Red Hat Bugzilla and Ubuntu security advisories.