1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.
  2. Dismiss Notice

BlueBorne Vulnerabilities Impact Over 5 Billion Bluetooth-Enabled Devices

Discussion in 'General Discussions' started by Linux-SWAT, Sep 13, 2017.

  1. Linux-SWAT

    Linux-SWAT Advanced Member

    Joined:
    Feb 13, 2010
    Messages:
    7,830
  2. klapse

    klapse Central Scrutinizer

    Joined:
    Aug 30, 2012
    Messages:
    1,619
    Location:
    Germany
    I searched forums for Bluetooth and didn't see this thread. Sorry.
     
  3. levi

    levi Still fresh, damnit!

    Joined:
    Oct 6, 2008
    Messages:
    7,750
    Location:
    Somewhere off the coast of the EU
    You were asking for the Pyra weren't you? The answer here is most likely different, in that I suspect the Pandora is very much still vulnerable to blueborne. I don't personally use bluetooth very often, so I'm not bothered (and never use it when out of the house, which limits the attack surface), but it is something to be aware of I guess. Has anyone checked whether the Pandora uses ASLR yet?
     
    Swordfish II likes this.
  4. TrashyMG

    TrashyMG Moderator Staff Member

    Joined:
    Jan 18, 2010
    Messages:
    9,986
    I think how manual the Pandora is when it comes with dealing with everything bluetooth I'm not sure how vulnerable the Pandora is.
     
    Grench and Swordfish II like this.
  5. levi

    levi Still fresh, damnit!

    Joined:
    Oct 6, 2008
    Messages:
    7,750
    Location:
    Somewhere off the coast of the EU
    From what I can tell, it simply needs bluetooth to be up, which is available on the settings menu widget thing. Judging by the video attacking a tizen watch, you simply point the hack at a bluetooth address, and it gets you into a root shell, by crashing the bluetooth deamon which has root privs, and apparently a buffer overflow bug which lets you write executable code after the end of the buffers and crash the CPU into that new code.
     
  6. FBnil

    FBnil ¡sɥʇuoɯ oʍʇ uı ɐɹʎԀ

    Joined:
    Dec 14, 2012
    Messages:
    1,943
    Location:
    Yurp
    it was in Bluez (Bug is a stack overflow in BlueZ (CVE-2017-1000251), patched already in Debian... so Pyra is good), and bluez4 is in angstrom... so it could be...

    Pandora has: bluez4 4.99r13.5

    They have not released exploit code (although the demo shows them using blues.py)
    Disclosed to Apple and others... but nothing public. So I do not know....

    opkg update; opkg list-upgradable does not show a new version yet... (but we have a forked Pandora repository, so that is not very effective).

    RedHat is not very helpful: https://access.redhat.com/errata/RHSA-2017:2685

    Debian is the same? https://search.debian.org/cgi-bin/omega?DB=en&P=bluez
    link to DSA-3972-1 bluez is dead. (although that one is a bug about sniffing more information, not the stack overflow bug)
     
    Last edited: Sep 13, 2017
  7. levi

    levi Still fresh, damnit!

    Joined:
    Oct 6, 2008
    Messages:
    7,750
    Location:
    Somewhere off the coast of the EU
    FBnil likes this.
  8. notaz

    notaz Certified Guru

    Joined:
    Aug 23, 2005
    Messages:
    4,878
    Location:
    Lithuania
    There are multiple bugs, some of them are in the kernel, others in bluez. I can push a kernel update once 3.2 (still supported) backport appears, but with bluez it will be more difficult as (AFAIK) no supported distros use 4.x bluez any more.
     
    Xcl4m4t10n, levi and FBnil like this.
  9. levi

    levi Still fresh, damnit!

    Joined:
    Oct 6, 2008
    Messages:
    7,750
    Location:
    Somewhere off the coast of the EU
    If this 'blues.py' script does ever get leaked, even just fixing one of the holes it relies on will stop any skiddies trying to use it against our Pandoras as I understand it, so an updated kernel would be welcome!
     
  10. Linux-SWAT

    Linux-SWAT Advanced Member

    Joined:
    Feb 13, 2010
    Messages:
    7,830
  11. comradekingu

    comradekingu Glowing ember

    Joined:
    Apr 15, 2011
    Messages:
    4,782
    Allegedly the original Bluetooth spread christianity to Denmark.
     
    ible likes this.
  12. ible

    ible Advanced Guard Tower

    Joined:
    Mar 24, 2014
    Messages:
    1,613
    Location:
    Twice in North Dakota, once in the Netherlands
    truth is stranger than fiction... especially blue-truth.
     
  13. Linux-SWAT

    Linux-SWAT Advanced Member

    Joined:
    Feb 13, 2010
    Messages:
    7,830
    So they also spread the Biblue ?
     

Share This Page

Loading...