CVE Feed

    Dashboard / CVE / CVE-2023-45866

    CVE-2023-45866

    Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.

    Published:Dec 7, 2023
    Last Modified:Nov 4, 2025
    EPS:Dec 8, 2023
    EPSS Score:0.2657
    CVSS Score:6.3

    Affected Products

    Vendor
    Apple
    Product
    Ipados
    Vendor
    Apple
    Product
    Iphone Os
    Vendor
    Apple
    Product
    Iphone Se
    Vendor
    Apple
    Product
    Macbook Air
    Vendor
    Apple
    Product
    Macbook Pro
    Vendor
    Apple
    Product
    Macos
    Vendor
    Bluproducts
    Product
    Dash
    Vendor
    Canonical
    Product
    Ubuntu Linux
    Vendor
    Debian
    Product
    Debian Linux
    Vendor
    Fedoraproject
    Product
    Fedora
    Vendor
    Google
    Product
    Android
    Vendor
    Google
    Product
    Nexus 5
    Vendor
    Google
    Product
    Pixel 2
    Vendor
    Google
    Product
    Pixel 4a
    Vendor
    Google
    Product
    Pixel 6
    Vendor
    Google
    Product
    Pixel 7
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    https://github.com/AvishekDhakal/CVE-2023-45866_EXPLOITShttps://github.com/Chedrian07/CVE-2023-45866-POChttps://github.com/cisnarfu/Bluepophttps://github.com/Danyw24/blueXploithttps://github.com/Eason-zz/BluetoothDuckyhttps://github.com/hegaz0y/-BuLhttps://github.com/jjjjjjjj987/cve-2023-45866-pyhttps://github.com/ladyg00se/CVE-2023-45866_WIPhttps://github.com/pentestfunctions/BlueDuckyhttps://github.com/Sergeb250/BlueDuckyhttps://github.com/v3ilsm1th/CVE-2023-45866_WIPhttps://github.com/xG3nesis/RustyInjector

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs
    CAPEC-104 Cross Zone Scripting
    CAPEC-114 Authentication Abuse
    CAPEC-115 Authentication Bypass
    CAPEC-127 Directory Indexing
    CAPEC-13 Subverting Environment Variable Values
    CAPEC-151 Identity Spoofing
    CAPEC-17 Using Malicious Files
    CAPEC-194 Fake the Source of Data
    CAPEC-22 Exploiting Trust in Client
    CAPEC-39 Manipulating Opaque Client-based Data Tokens
    CAPEC-402 Bypassing ATA Password Security
    CAPEC-45 Buffer Overflow via Symbolic Links
    CAPEC-5 Blue Boxing
    CAPEC-51 Poison Web Service Registry
    CAPEC-57 Utilizing REST's Trust in the System Resource to Obtain Sensitive Data
    CAPEC-59 Session Credential Falsification through Prediction
    CAPEC-593 Session Hijacking
    CAPEC-60 Reusing Session IDs (aka Session Replay)
    CAPEC-633 Token Impersonation
    CAPEC-647 Collect Data from Registries
    CAPEC-650 Upload a Web Shell to a Web Server
    CAPEC-668 Key Negotiation of Bluetooth Attack (KNOB)
    CAPEC-76 Manipulating Web Input to File System Calls
    CAPEC-77 Manipulating User-Controlled Variables
    CAPEC-87 Forceful Browsing
    CAPEC-94 Adversary in the Middle (AiTM)

    Related CVEs

    CVE-2026-65367 (CVSS 5.5) — A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and…
    CVE-2026-43670 (CVSS 8.8) — A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue …
    CVE-2026-65331 (CVSS 4.3) — This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 …
    CVE-2026-64760 (CVSS 5.5) — An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.10 and iPadOS…
    CVE-2026-43794 (CVSS 8.8) — A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, i…
    CVE-2026-65346 (CVSS 8.8) — An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS…
    CVE-2026-65351 (CVSS 4.3) — This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 26.6.1 a…
    CVE-2026-64782 (CVSS 3.1) — A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, i…
    CVE-2026-65347 (CVSS 6.5) — The issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe…
    CVE-2026-43795 (CVSS 4.3) — The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and i…

    References

    http://changelogs.ubuntu.com/changelogs/pool/main/b/bluez/bluez_5.64-0ubuntu1/changelog
    http://seclists.org/fulldisclosure/2023/Dec/7
    http://seclists.org/fulldisclosure/2023/Dec/9
    https://bluetooth.com
    https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/profiles/input?id=25a471a83e02e1effb15d5a488b3f0085eaeb675
    https://github.com/skysafe/reblog/tree/main/cve-2023-45866
    https://lists.debian.org/debian-lts-announce/2023/12/msg00011.html
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/77YQQS5FXPYE6WBBZO3REFIRAUJHERFA/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D2N2P5LMP3V7IJONALV2KOFL4NUU23CJ/
    https://security.gentoo.org/glsa/202401-03
    https://support.apple.com/kb/HT214035
    https://support.apple.com/kb/HT214036
    https://www.debian.org/security/2023/dsa-5584
    http://changelogs.ubuntu.com/changelogs/pool/main/b/bluez/bluez_5.64-0ubuntu1/changelog
    http://seclists.org/fulldisclosure/2023/Dec/7
    http://seclists.org/fulldisclosure/2023/Dec/9
    https://bluetooth.com
    https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/profiles/input?id=25a471a83e02e1effb15d5a488b3f0085eaeb675
    https://github.com/skysafe/reblog/tree/main/cve-2023-45866
    https://lists.debian.org/debian-lts-announce/2023/12/msg00011.html
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/77YQQS5FXPYE6WBBZO3REFIRAUJHERFA/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D2N2P5LMP3V7IJONALV2KOFL4NUU23CJ/
    https://lists.fedoraproject.org/archives/list/[email protected]/message/77YQQS5FXPYE6WBBZO3REFIRAUJHERFA/
    https://lists.fedoraproject.org/archives/list/[email protected]/message/D2N2P5LMP3V7IJONALV2KOFL4NUU23CJ/
    https://security.gentoo.org/glsa/202401-03
    https://support.apple.com/kb/HT214035
    https://support.apple.com/kb/HT214036
    https://www.debian.org/security/2023/dsa-5584

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High