Some Broadcom chips mishandle Bluetooth random-number generation because a low-entropy Pseudo Random Number Generator (PRNG) is used in situations where a Hardware Random Number Generator (HRNG) should have been used to prevent spoofing. This affects, for example, Samsung Galaxy S8, S8+, and Note8 devices with the BCM4361 chipset. The Samsung ID is SVE-2020-16882 (May 2020).
References
Link | Resource |
---|---|
http://bluetooth.lol | Third Party Advisory |
http://seclists.org/fulldisclosure/2020/May/49 | Mailing List Third Party Advisory |
https://github.com/seemoo-lab/internalblue/blob/master/doc/rng.md | Third Party Advisory |
https://media.ccc.de/v/DiVOC-6-finding_eastereggs_in_broadcom_s_bluetooth_random_number_generator | Exploit Third Party Advisory |
https://security.samsungmobile.com/securityUpdate.smsb | Vendor Advisory |
https://support.apple.com/HT211168 | Third Party Advisory |
https://support.apple.com/kb/HT211100 | Third Party Advisory |
https://support.apple.com/kb/HT211168 | Third Party Advisory |
https://twitter.com/naehrdine/status/1255980443368919045 | Third Party Advisory |
https://twitter.com/naehrdine/status/1255981245147877377 | Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
|
History
26 Apr 2022, 17:32
Type | Values Removed | Values Added |
---|---|---|
CWE | NVD-CWE-noinfo | |
References | (CONFIRM) https://support.apple.com/kb/HT211168 - Third Party Advisory | |
References | (CONFIRM) https://support.apple.com/HT211168 - Third Party Advisory | |
References | (FULLDISC) http://seclists.org/fulldisclosure/2020/May/49 - Mailing List, Third Party Advisory | |
References | (CONFIRM) https://support.apple.com/kb/HT211100 - Third Party Advisory | |
CPE | cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.13.6:supplemental_update:*:*:*:*:*:* cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-004:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2018-003:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2018-002:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-005:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-006:*:*:*:*:*:* cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-001:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-002:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2020-001:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-007:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-003:*:*:*:*:*:* |
Information
Published : 2020-05-08 20:15
Updated : 2024-02-04 21:00
NVD link : CVE-2020-6616
Mitre link : CVE-2020-6616
CVE.ORG link : CVE-2020-6616
JSON object : View
Products Affected
apple
- iphone_os
- ipados
- mac_os_x
samsung
- galaxy_s8
- galaxy_s8_plus
- galaxy_note8
- android
CWE