The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service (crash) in ESP32 by flooding the target device with LMP Feature Response data.
References
| Link | Resource |
|---|---|
| https://dl.packetstormsecurity.net/papers/general/braktooth.pdf | Broken Link |
| https://github.com/espressif/esp-idf | Third Party Advisory |
| https://github.com/espressif/esp32-bt-lib | Third Party Advisory |
| https://www.espressif.com/en/products/socs/esp32 | Product |
| https://dl.packetstormsecurity.net/papers/general/braktooth.pdf | Broken Link |
| https://github.com/espressif/esp-idf | Third Party Advisory |
| https://github.com/espressif/esp32-bt-lib | Third Party Advisory |
| https://www.espressif.com/en/products/socs/esp32 | Product |
Configurations
History
21 Nov 2024, 05:59
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://dl.packetstormsecurity.net/papers/general/braktooth.pdf - Broken Link | |
| References | () https://github.com/espressif/esp-idf - Third Party Advisory | |
| References | () https://github.com/espressif/esp32-bt-lib - Third Party Advisory | |
| References | () https://www.espressif.com/en/products/socs/esp32 - Product |
Information
Published : 2021-09-07 06:15
Updated : 2024-11-21 05:59
NVD link : CVE-2021-28135
Mitre link : CVE-2021-28135
CVE.ORG link : CVE-2021-28135
JSON object : View
Products Affected
espressif
- esp-idf
CWE