3 ms·
Link to the whitepaper. http://go.armis.com/hubfs/BlueBorne%20Technical%20White%20Paper.pdf http://go.armis.com/hubfs/BlueBorne%20Technical%20White%20Pa... Pa
by bjt2n3904 9y ago
Link to the whitepaper.
http://go.armis.com/hubfs/BlueBorne%20Technical%20White%20Paper.pdf http://go.armis.com/hubfs/BlueBorne%20Technical%20White%20Pa...
Part of the attack is on BlueZ's implementation.
> In BlueZ’s case, L2CAP is included as part of the core Linux kernel code. This is a rather dangerous choice. Combining a fully exposed communication protocol, arcane features like EFS and a kernel space implementation is a recipe for trouble.
- crescentfresh 9y agoWhy are none of the CVE vulnerability ids from that paper coming up for me in the CVE database? Eg http://www.cvedetails.com/cve/CVE-2017-14315/ http://www.cvedetails.com/cve/CVE-2017-14315/ I tried all 8 of them, none found.
- sillysaurus3 9y agoDepends on the newness of the attack. It can take awhile for an attack to get into the CVE DB. Though usually it says "this CVE is reserved" rather than "not found."
- ghaff 9y agoIt was only unembargoed at 9AM EDT. More details here: https://access.redhat.com/blogs/product-security/posts/blueborne https://access.redhat.com/blogs/product-security/posts/blueb...
- Ajedi32 9y agocve.mitre.org has at least some of them: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14315 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1431...
- crescentfresh 9y agoThat was also not there a couple of hours ago!
- tmzt 9y agoIs EFS here referring to Qualcom chipset filesystem, and what does that have to do with L2CAP being in the kernel just like IP and other protocols?
- keyme 9y agoFrom the WP: "... Extended Flow Specification (EFS) [is a] feature of L2CAP ..."