The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.2 and earlier (for ESP32 devices) does not properly restrict the channel map field of the connection request packet on reception, allowing attackers in radio range to cause a denial of service (crash) via a crafted packet.
References
Link | Resource |
---|---|
https://asset-group.github.io/cves.html | Third Party Advisory |
https://asset-group.github.io/disclosures/sweyntooth/ | Third Party Advisory |
https://github.com/espressif/esp32-bt-lib | Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2020-08-31T14:58:25
Updated: 2020-08-31T14:58:25
Reserved: 2020-05-26T00:00:00
Link: CVE-2020-13594
JSON object: View
NVD Information
Status : Analyzed
Published: 2020-08-31T15:15:10.633
Modified: 2020-09-08T21:07:00.197
Link: CVE-2020-13594
JSON object: View
Redhat Information
No data.
CWE