CVE-2020-10134 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2020-10134 Interim 1 21 2025-02-17T01:33:55Z current 2022-04-19T15:34:07Z 2025-02-17T01:33:55Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2020-10134 Pairing in Bluetooth® Core v5.2 and earlier may permit an unauthenticated attacker to acquire credentials with two pairing devices via adjacent access when the unauthenticated user initiates different pairing methods in each peer device and an end-user erroneously completes both pairing procedures with the MITM using the confirmation number of one peer as the passkey of the other. An adjacent, unauthenticated attacker could be able to initiate any Bluetooth operation on either attacked device exposed by the enabled Bluetooth profiles. This exposure may be limited when the user must authorize certain access explicitly, but so long as a user assumes that it is the intended remote device requesting permissions, device-local protections may be weakened. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Enterprise Storage 7 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Linux Enterprise High Performance Computing 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server Business Critical Linux 15 SP2 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Manager Proxy 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Manager Retail Branch Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Manager Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 bluez bluez-cups bluez-deprecated bluez-devel libbluetooth3 bluez as a component of SUSE Enterprise Storage 7 bluez as a component of SUSE Linux Enterprise High Performance Computing 12 SP4 bluez as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 bluez as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS bluez-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libbluetooth3 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS bluez as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS bluez-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS libbluetooth3 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS bluez as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS bluez-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libbluetooth3 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS bluez as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS bluez-devel as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libbluetooth3 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS bluez as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 bluez-deprecated as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libbluetooth3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 bluez as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 bluez-deprecated as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libbluetooth3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 bluez-devel as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 bluez as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 bluez-devel as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 bluez as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 bluez as a component of SUSE Linux Enterprise Server 11 SP3 libbluetooth3 as a component of SUSE Linux Enterprise Server 11 SP3 bluez as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata bluez as a component of SUSE Linux Enterprise Server 12 SP2-BCL libbluetooth3 as a component of SUSE Linux Enterprise Server 12 SP2-BCL bluez as a component of SUSE Linux Enterprise Server 12 SP3-BCL libbluetooth3 as a component of SUSE Linux Enterprise Server 12 SP3-BCL bluez as a component of SUSE Linux Enterprise Server 12 SP4 libbluetooth3 as a component of SUSE Linux Enterprise Server 12 SP4 bluez as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libbluetooth3 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS bluez as a component of SUSE Linux Enterprise Server 12 SP5 libbluetooth3 as a component of SUSE Linux Enterprise Server 12 SP5 bluez as a component of SUSE Linux Enterprise Server 15 SP2-LTSS bluez-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libbluetooth3 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS bluez as a component of SUSE Linux Enterprise Server 15-ESPOS bluez as a component of SUSE Linux Enterprise Server 15-LTSS bluez-devel as a component of SUSE Linux Enterprise Server 15-LTSS libbluetooth3 as a component of SUSE Linux Enterprise Server 15-LTSS bluez as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 bluez as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP2 bluez as a component of SUSE Linux Enterprise Server Teradata 12 SP3 bluez as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libbluetooth3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 bluez as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 bluez as a component of SUSE Linux Enterprise Server for SAP Applications 15 bluez-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 libbluetooth3 as a component of SUSE Linux Enterprise Server for SAP Applications 15 bluez as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 bluez-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libbluetooth3 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 bluez-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 bluez as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 bluez-cups as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 bluez as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 bluez-cups as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 bluez as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 bluez-cups as a component of SUSE Linux Enterprise Workstation Extension 15 SP4 bluez as a component of SUSE Linux Enterprise Workstation Extension 15 SP4 bluez as a component of SUSE Manager Proxy 4.1 bluez as a component of SUSE Manager Retail Branch Server 4.1 bluez as a component of SUSE Manager Server 4.1 Pairing in Bluetooth® Core v5.2 and earlier may permit an unauthenticated attacker to acquire credentials with two pairing devices via adjacent access when the unauthenticated user initiates different pairing methods in each peer device and an end-user erroneously completes both pairing procedures with the MITM using the confirmation number of one peer as the passkey of the other. An adjacent, unauthenticated attacker could be able to initiate any Bluetooth operation on either attacked device exposed by the enabled Bluetooth profiles. This exposure may be limited when the user must authorize certain access explicitly, but so long as a user assumes that it is the intended remote device requesting permissions, device-local protections may be weakened. CVE-2020-10134 SUSE Enterprise Storage 7:bluez SUSE Linux Enterprise High Performance Computing 12 SP5:bluez SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:bluez SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:bluez-devel SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libbluetooth3 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:bluez SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:bluez-devel SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libbluetooth3 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:bluez SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:bluez-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libbluetooth3 SUSE Linux Enterprise High Performance Computing 15-LTSS:bluez SUSE Linux Enterprise High Performance Computing 15-LTSS:bluez-devel SUSE Linux Enterprise High Performance Computing 15-LTSS:libbluetooth3 SUSE Linux Enterprise Module for Basesystem 15 SP3:bluez SUSE Linux Enterprise Module for Basesystem 15 SP3:bluez-deprecated SUSE Linux Enterprise Module for Basesystem 15 SP3:libbluetooth3 SUSE Linux Enterprise Module for Basesystem 15 SP4:bluez SUSE Linux Enterprise Module for Basesystem 15 SP4:bluez-deprecated SUSE Linux Enterprise Module for Basesystem 15 SP4:libbluetooth3 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:bluez SUSE Linux Enterprise Module for Desktop Applications 15 SP3:bluez-devel SUSE Linux Enterprise Module for Desktop Applications 15 SP4:bluez SUSE Linux Enterprise Module for Desktop Applications 15 SP4:bluez-devel SUSE Linux Enterprise Server 11 SP3 for Teradata:bluez SUSE Linux Enterprise Server 11 SP3:bluez SUSE Linux Enterprise Server 11 SP3:libbluetooth3 SUSE Linux Enterprise Server 12 SP2-BCL:bluez SUSE Linux Enterprise Server 12 SP2-BCL:libbluetooth3 SUSE Linux Enterprise Server 12 SP3-BCL:bluez SUSE Linux Enterprise Server 12 SP3-BCL:libbluetooth3 SUSE Linux Enterprise Server 12 SP4-LTSS:bluez SUSE Linux Enterprise Server 12 SP4-LTSS:libbluetooth3 SUSE Linux Enterprise Server 12 SP5:bluez SUSE Linux Enterprise Server 12 SP5:libbluetooth3 SUSE Linux Enterprise Server 15 SP2-LTSS:bluez SUSE Linux Enterprise Server 15 SP2-LTSS:bluez-devel SUSE Linux Enterprise Server 15 SP2-LTSS:libbluetooth3 SUSE Linux Enterprise Server 15-ESPOS:bluez SUSE Linux Enterprise Server 15-LTSS:bluez SUSE Linux Enterprise Server 15-LTSS:bluez-devel SUSE Linux Enterprise Server 15-LTSS:libbluetooth3 SUSE Linux Enterprise Server Business Critical Linux 15 SP1:bluez SUSE Linux Enterprise Server Business Critical Linux 15 SP2:bluez SUSE Linux Enterprise Server Teradata 12 SP3:bluez SUSE Linux Enterprise Server for SAP Applications 12 SP4:bluez SUSE Linux Enterprise Server for SAP Applications 12 SP4:libbluetooth3 SUSE Linux Enterprise Server for SAP Applications 12 SP5:bluez SUSE Linux Enterprise Server for SAP Applications 15 SP2:bluez SUSE Linux Enterprise Server for SAP Applications 15 SP2:bluez-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:libbluetooth3 SUSE Linux Enterprise Server for SAP Applications 15:bluez SUSE Linux Enterprise Server for SAP Applications 15:bluez-devel SUSE Linux Enterprise Server for SAP Applications 15:libbluetooth3 SUSE Linux Enterprise Software Development Kit 12 SP5:bluez SUSE Linux Enterprise Software Development Kit 12 SP5:bluez-devel SUSE Linux Enterprise Workstation Extension 12 SP5:bluez SUSE Linux Enterprise Workstation Extension 12 SP5:bluez-cups SUSE Linux Enterprise Workstation Extension 15 SP3:bluez SUSE Linux Enterprise Workstation Extension 15 SP3:bluez-cups SUSE Linux Enterprise Workstation Extension 15 SP4:bluez SUSE Linux Enterprise Workstation Extension 15 SP4:bluez-cups SUSE Manager Proxy 4.1:bluez SUSE Manager Retail Branch Server 4.1:bluez SUSE Manager Server 4.1:bluez moderate 4.3 AV:A/AC:M/Au:N/C:P/I:P/A:N 5.9 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L