CVE-2018-5383: Bluetooth implementations may not sufficiently validate elliptic curve parameters during Diffie-Hellman key exchange

Published Jun 1, 2018
·
Updated

A vulnerability in Bluetooth pairing potentially allows an attacker with physical proximity (within 30 meters) to gain unauthorized access via an adjacent network, intercept traffic and send forged pairing messages between two vulnerable Bluetooth devices. This may result in information disclosure, elevation of privilege and/or denial of service.

External References:

https://www.kb.cert.org/vuls/id/304725 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00128.html https://www.bluetooth.com/news/unknown/2018/07/bluetooth-sig-security-update

Other sources

Bluetooth firmware or operating system software drivers in macOS versions before 10.13, High Sierra and iOS versions before 11.4, and Android versions before the 2018-06-05 patch may not sufficiently validate elliptic curve parameters used to generate public keys during a Diffie-Hellman key exchange, which may allow a remote attacker to obtain the encryption key used by the device.

Launchpad

Bluetooth. An input validation issue existed in Bluetooth. This issue was addressed with improved input validation.

Credit

Lior Neumann, Eli Biham

Affected Software

18 affected componentsFixes available
Apple tvOS<12
12
Apple macOS High Sierra<10.13.5
10.13.5
Apple Sierra
Apple El Capitan
Apple macOS Mojave<10.14
10.14
Apple iOS<12
12
Google Android=6.0
Google Android=6.0.1
Google Android=7.0
Google Android=7.1.1
Google Android=7.1.2
Google Android=8.0
Google Android=8.1
Apple iPhone OS<11.4
Apple iOS and macOS<10.13
Google Android
ti Wl18xx Bluetooth Service Pack<4.3
debian/firmware-nonfree
20210315-320230210-520250410-220260519-1

Remediation

Event History

Aug 6, 2018
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityWeaknessAffected Software
Aug 7, 2018
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:29 PM
DescriptionSeverityWeaknessAffected Software
Aug 9, 2018
Data Sourced
via Red Hat·05:58 AM
DescriptionSeverityAffected Software
Jan 11, 2024
Data Sourced
via Launchpad·11:08 PM
Description
May 23, 2026
Data Sourced
via Ubuntu·09:27 AM
RemedyDescriptionSeverityAffected Software
Jun 11, 2026
Data Sourced
via Debian·09:48 AM
DescriptionAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2018-5383?

CVE-2018-5383 is characterized as having a high severity due to the potential for unauthorized access and information interception.

2

How do I fix CVE-2018-5383?

To fix CVE-2018-5383, update your affected devices to the latest versions provided by the vendor.

3

Which devices are affected by CVE-2018-5383?

CVE-2018-5383 affects various devices including certain versions of Apple iOS, Android, macOS, and tvOS.

4

What kind of attack does CVE-2018-5383 enable?

CVE-2018-5383 enables attackers to intercept traffic and send forged pairing messages between vulnerable Bluetooth devices.

5

How far can an attacker be to exploit CVE-2018-5383?

An attacker exploiting CVE-2018-5383 needs to be in physical proximity, within approximately 30 meters of the targeted devices.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203