Remote Code Execution Vulnerability in BlueZ HID over GATT Profile
Summary
CVE-2024-8805: BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability. Affects linux versions < 68864d1aa818aca00d67f7a4d6078344483e9509. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
BlueZ is the official Linux Bluetooth protocol stack, providing support for various Bluetooth profiles and protocols. The HID over GATT Profile allows Bluetooth devices to communicate with human interface devices like keyboards and mice. This functionality is crucial for enabling seamless interaction between devices, but it also introduces potential security risks if not properly secured.
Vulnerability Detail
The vulnerability, identified as CVE-2024-8805, arises from improper access control within the HID over GATT Profile implementation in BlueZ. This flaw allows network-adjacent attackers to execute arbitrary code on affected installations without requiring authentication. The lack of authorization before granting access to critical functionality poses a significant risk, as an attacker can exploit this vulnerability to execute code in the context of the current user, potentially leading to unauthorized access and control over the system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can limit network access to the affected devices or disable the HID over GATT Profile functionality until the patch is applied. This can be done by modifying the Bluetooth configuration settings to restrict access.
Conclusion
CVE-2024-8805 represents a significant security risk for users of BlueZ, particularly those utilizing the HID over GATT Profile. It is crucial to apply the necessary updates to mitigate the risk of remote code execution. Users are encouraged to monitor their systems and implement workarounds until patches are applied.
See every vulnerability recorded for linux →
FAQ
CVE-2024-8805 is a remote code execution vulnerability in the BlueZ HID over GATT Profile that allows attackers to execute arbitrary code without authentication.
Any installation of BlueZ that implements the HID over GATT Profile is potentially vulnerable, particularly on Debian systems.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The CVSS score for CVE-2024-8805 is 8.8, indicating a high severity level.
If an immediate update is not possible, consider restricting network access to the affected devices or disabling the HID over GATT Profile functionality as a temporary measure.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
