Skip to content
Fencer Vulns
medium 6.3

CVE-2023-45866 json

Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, an…

published 2023-12-08 2 y ago modified 2026-06-17 4 mo ago also EUVD-2023-50132

cvss
6.3
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
7.9%
EPSS 7.9% chance of exploitation in 30 days, percentile 94%
public exploits
0
none known

Summary

Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.

Patch / fix

  • apple ipados 17.2
  • apple iphone_os 17.2
  • apple macos 14.2
  • bluez Debian 12 5.66-1+deb12u1
  • bluez Debian 14, Debian 13 5.70-1.1

debian advisories DEBIAN-CVE-2023-45866

  • bluez Ubuntu 20.04 LTS 5.53-0ubuntu3.7
  • bluez Ubuntu 22.04 LTS 5.64-0ubuntu1.1
  • bluez Ubuntu 24.04 LTS 5.70-0ubuntu3
  • bluez Ubuntu Pro 16.04 LTS 5.37-0ubuntu5.3+esm3
  • bluez Ubuntu Pro 18.04 LTS 5.48-0ubuntu3.9+esm1

ubuntu advisories UBUNTU-CVE-2023-45866

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • bluez RHEL 8 5.63-3.el8_10
  • bluez-cups RHEL 8 5.63-3.el8_10
  • bluez-libs RHEL 8 5.63-3.el8_10
  • bluez-obexd RHEL 8 5.63-3.el8_10
  • bluez-hid2hci RHEL 8 5.63-3.el8_10
  • bluez RHEL 9 5.72-2.el9
  • bluez-cups RHEL 9 5.72-2.el9
  • bluez-libs RHEL 9 5.72-2.el9

red hat advisories RHSA-2024:11154RHSA-2024:9413

  • bluez Linux Micro 6.0 5.70-2.1
  • bluez Linux Micro 6.1 5.70-slfo.1.1_2.1
  • bluez SLE Micro 5.4, SLE Micro 5.3 5.62-150400.4.22.1
  • bluez SLE Micro 5.5 5.65-150500.3.14.1
  • bluez SLES LTSS Extended Security 12 SP5 5.13-5.45.1

suse advisories SUSE-SU-2026:20041-1SUSE-SU-2025:03590-1SUSE-SU-2025:20804-1SUSE-SU-2025:03277-1SUSE-SU-2025:03269-1

  • bluez openSUSE Tumbleweed 5.70-2.1

opensuse advisories openSUSE-SU-2024:13507-1

  • bluez AlmaLinux 8 5.63-3.el8_10.alma.1
  • bluez-cups AlmaLinux 8 5.63-3.el8_10.alma.1
  • bluez-libs AlmaLinux 8 5.63-3.el8_10.alma.1
  • bluez-obexd AlmaLinux 8 5.63-3.el8_10.alma.1
  • bluez-hid2hci AlmaLinux 8 5.63-3.el8_10.alma.1
  • bluez AlmaLinux 9 5.72-2.el9
  • bluez-cups AlmaLinux 9 5.72-2.el9
  • bluez-libs AlmaLinux 9 5.72-2.el9

almalinux advisories ALSA-2024:11154ALSA-2024:9413

  • bluez Rocky Linux 9 5.72-2.el9

rocky linux advisories RLSA-2024:9413

  • bluez CBL-Mariner 2.0 5.63-5
  • bluez Azure Linux 3.0 5.63-6

azure linux advisories AZL-32161AZL-34571

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2023-45866 updated cvss 6.3

bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution

  • Red Hat Enterprise Linux 6 bluez, bluez-alsa, bluez-cups, bluez-libs, bluez-compat, bluez-gstreamer Red Hat Enterprise Linux 7 bluez, bluez-cups, bluez-libs, bluez-hid2hci
    affected: workaround, no fix planned “Out of support scope”
  • Red Hat CodeReady Linux Builder (v. 9) bluez 5.72-2.el9, bluez-cups 5.72-2.el9, bluez-libs 5.72-2.el9, bluez-obexd 5.72-2.el9
    fixed: vendor fix RHSA-2024:9413
  • Red Hat Enterprise Linux AppStream (v. 8) bluez 5.63-3.el8_10, bluez-cups 5.63-3.el8_10, bluez-libs 5.63-3.el8_10, bluez-obexd 5.63-3.el8_10, bluez-hid2hci 5.63-3.el8_10
    fixed: vendor fix RHSA-2024:11154
  • Red Hat Enterprise Linux AppStream (v. 9) bluez 5.72-2.el9, bluez-cups 5.72-2.el9, bluez-libs 5.72-2.el9, bluez-obexd 5.72-2.el9
    fixed: vendor fix RHSA-2024:9413
  • Red Hat Enterprise Linux BaseOS (v. 8) bluez 5.63-3.el8_10, bluez-cups 5.63-3.el8_10, bluez-libs 5.63-3.el8_10, bluez-obexd 5.63-3.el8_10, bluez-hid2hci 5.63-3.el8_10
    fixed: vendor fix RHSA-2024:11154
  • Red Hat Enterprise Linux BaseOS (v. 9) bluez 5.72-2.el9, bluez-cups 5.72-2.el9, bluez-libs 5.72-2.el9, bluez-obexd 5.72-2.el9
    fixed: vendor fix RHSA-2024:9413
  • Red Hat Enterprise Linux CRB (v. 8) bluez 5.63-3.el8_10, bluez-cups 5.63-3.el8_10, bluez-libs 5.63-3.el8_10, bluez-obexd 5.63-3.el8_10, bluez-hid2hci 5.63-3.el8_10
    fixed: vendor fix RHSA-2024:11154

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

7.88% chance of exploitation in the next 30 days, higher than 94% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.1 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.