ZDI-24-1229: BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability
First published: Tue Sep 17 2024(Updated: )
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the HID over GATT Profile. The issue results from the lack of authorization prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of the current user.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SUSE BlueZ |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.zerodayinitiative.com/advisories/ZDI-24-1229/ (Advisory)
- https://patchwork.kernel.org/project/bluetooth/patch/20240912204458.3037144-1-luiz.dentz@gmail.com/
- https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=370e38c32529e0899bb387a70d5d92dfb5a2b3c5
- https://www.zerodayinitiative.com/advisories/ZDI-24-1229/
Frequently Asked Questions
What is the severity of ZDI-24-1229?
The severity of ZDI-24-1229 is critical due to the ability for unauthenticated network-adjacent attackers to execute arbitrary code.
How do I fix ZDI-24-1229?
Fixing ZDI-24-1229 involves updating BlueZ to the latest version provided by the vendor that addresses this vulnerability.
What versions of BlueZ are affected by ZDI-24-1229?
ZDI-24-1229 affects various installations of BlueZ, but exact versions can vary; it is essential to consult the vendor's advisory for specifics.
Can ZDI-24-1229 be exploited remotely?
Yes, ZDI-24-1229 can be exploited remotely as it allows network-adjacent attackers to execute arbitrary code without authentication.
What are the potential impacts of ZDI-24-1229?
The potential impacts of ZDI-24-1229 include unauthorized access to system resources and complete control over the affected installations.
- collector/zdi-published
- source/ZDI
- alias/ZDI-CAN-25177
- agent/title
- agent/last-modified-date
- agent/first-publish-date
- agent/type
- agent/references
- agent/severity
- agent/description
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- agent/event
- collector/zdi-advisory
- alias/ZDI-24-1229
- alias/CVE-2024-8805
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/bluez
- canonical/suse bluez