Back

HIGH

Blutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiation

Published Aug 14, 2019

Description

The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.

Affected products

Remediation

Vendor solution

Bluetooth SIG Expedited Errata Correction 11838

Red Hat mitigation

At this time there is no known mitigation if bluetooth hardware is to be continue to be used. Replacing the hardware with its wired version and disabling bluetooth may be a suitable alternative for some environments.

Metrics

References (34)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner certcc
Published Aug 14, 2019
Updated Sep 16, 2024
Reserved Mar 1, 2019
NVD
Status Modified
Modified Jun 17, 2026
Red Hat
Severity Important
Public date Aug 10, 2019