Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bleeding Tooth: Linux Bluetooth Zero Click RCE Exploit #19784

Open
gardnerapp opened this issue Jan 2, 2025 · 2 comments
Open

Bleeding Tooth: Linux Bluetooth Zero Click RCE Exploit #19784

gardnerapp opened this issue Jan 2, 2025 · 2 comments
Assignees
@dledda-r7
Labels
suggestion-feature New feature suggestions suggestion-module New module suggestions

Comments

@gardnerapp
Copy link
Contributor

gardnerapp commented Jan 2, 2025 •
edited
Loading

Full write up here. Functioning exploit requires chaining three vulnerabilities together.

Bad Vibes CVE-2020-24490
Bad Choice CVE-2020-12352
Bad Karma CVE-2020-12351
@gardnerapp gardnerapp added the suggestion-feature New feature suggestions label Jan 2, 2025
@gardnerapp gardnerapp changed the title Linux Bluetooth Zero Click Zero Day Bleeding Tooth: Linux Bluetooth Zero Click Exploit Jan 2, 2025
@gardnerapp gardnerapp changed the title Bleeding Tooth: Linux Bluetooth Zero Click Exploit Bleeding Tooth: Linux Bluetooth Zero Click RCE Exploit Jan 2, 2025
@bcoles bcoles added the suggestion-module New module suggestions label Jan 2, 2025
@dledda-r7 dledda-r7 self-assigned this Jan 7, 2025
@dledda-r7 dledda-r7 moved this to Todo in Metasploit Kanban Jan 7, 2025
@dledda-r7
Copy link
Contributor

I would like to take a look on that

@gardnerapp
Copy link
Contributor Author

PoC. Uses BadChoice & BadKarma. If possible I'd like to contribute to building this module, because there is already a PoC out there would we just add the binary to msf and trigger it via a module?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@dledda-r7 dledda-r7

Labels
suggestion-feature New feature suggestions suggestion-module New module suggestions
Projects
Metasploit Kanban
Status: Todo
Milestone
No milestone
Development

No branches or pull requests
3 participants
@bcoles @gardnerapp @dledda-r7