Some Broadcom chips mishandle Bluetooth random-number generation because a low-entropy Pseudo Random Number Generator (PRNG) is used in situations where a Hardware Random Number Generator (HRNG) should have been used to prevent spoofing. This affects, for example, Samsung Galaxy S8, S8+, and Note8 devices with the BCM4361 chipset. The Samsung ID is SVE-2020-16882 (May 2020).
References
| Link | Resource |
|---|---|
| http://bluetooth.lol | Third Party Advisory |
| http://seclists.org/fulldisclosure/2020/May/49 | Mailing List Third Party Advisory |
| https://github.com/seemoo-lab/internalblue/blob/master/doc/rng.md | Third Party Advisory |
| https://media.ccc.de/v/DiVOC-6-finding_eastereggs_in_broadcom_s_bluetooth_random_number_generator | Exploit Third Party Advisory |
| https://security.samsungmobile.com/securityUpdate.smsb | Vendor Advisory |
| https://support.apple.com/HT211168 | Third Party Advisory |
| https://support.apple.com/kb/HT211100 | Third Party Advisory |
| https://support.apple.com/kb/HT211168 | Third Party Advisory |
| https://twitter.com/naehrdine/status/1255980443368919045 | Third Party Advisory |
| https://twitter.com/naehrdine/status/1255981245147877377 | Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
|
History
09 Jan 2023, 16:41
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Apple ipados
|
|
| CPE | cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* |
26 Apr 2022, 17:32
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Apple
Apple ipad Os Apple mac Os X Apple iphone Os |
|
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-004:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-001:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-003:*:*:*:*:*:* cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-005:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2018-003:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-002:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2018-002:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-006:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.13.6:supplemental_update:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-007:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2020-001:*:*:*:*:*:* cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:* |
|
| References | (CONFIRM) https://support.apple.com/kb/HT211100 - Third Party Advisory | |
| References | (CONFIRM) https://support.apple.com/HT211168 - Third Party Advisory | |
| References | (FULLDISC) http://seclists.org/fulldisclosure/2020/May/49 - Mailing List, Third Party Advisory | |
| References | (CONFIRM) https://support.apple.com/kb/HT211168 - Third Party Advisory |
Information
Published : 2020-05-08 20:15
Updated : 2023-12-10 13:27
NVD link : CVE-2020-6616
Mitre link : CVE-2020-6616
CVE.ORG link : CVE-2020-6616
JSON object : View
Products Affected
apple
- iphone_os
- ipados
- mac_os_x
samsung
- galaxy_note8
- galaxy_s8
- galaxy_s8_plus
- android
CWE