ZDI-24-1229: BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the HID over GATT Profile. The issue results from the lack of authorization prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of the current user.
Other sources
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2024-8805.
— ZDI
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ZDI-24-1229
Event History
Frequently Asked Questions
What is the severity of ZDI-24-1229?
The severity of ZDI-24-1229 is critical due to the ability for unauthenticated network-adjacent attackers to execute arbitrary code.
How do I fix ZDI-24-1229?
Fixing ZDI-24-1229 involves updating BlueZ to the latest version provided by the vendor that addresses this vulnerability.
What versions of BlueZ are affected by ZDI-24-1229?
ZDI-24-1229 affects various installations of BlueZ, but exact versions can vary; it is essential to consult the vendor's advisory for specifics.
Can ZDI-24-1229 be exploited remotely?
Yes, ZDI-24-1229 can be exploited remotely as it allows network-adjacent attackers to execute arbitrary code without authentication.
What are the potential impacts of ZDI-24-1229?
The potential impacts of ZDI-24-1229 include unauthorized access to system resources and complete control over the affected installations.