Test ID:	1.3.6.1.4.1.25623.1.1.9.2024.223428101702
Category:	Fedora Local Security Checks
Title:	Fedora: Security Advisory (FEDORA-2024-223428e702)
Summary:	The remote host is missing an update for the 'bluez, iwd, libell' package(s) announced via the FEDORA-2024-223428e702 advisory.
Description:	Summary: The remote host is missing an update for the 'bluez, iwd, libell' package(s) announced via the FEDORA-2024-223428e702 advisory. Vulnerability Insight: libell 0.69: Add support for getting remaining microseconds left on a timer. Add support for setting link MTU on a network interface. iwd 2.21: Fix issue with pending scan requests after regdom update. Fix issue with handling the rearming of the roaming timeout. Fix issue with survey request and externally triggered scans. Fix issue with RSSI fallback when setting CQM threshold fails. Fix issue with FT-over-Air without offchannel support. Add support for per station Affinities property. bluez 5.78: Fix issue with handling notification of scanned BISes to BASS Fix issue with handling checking BIS caps against peer caps. Fix issue with handling MGMT Set Device Flags overwrites. Fix issue with handling ASE notification order. Fix issue with handling BIG Info report events. Fix issue with handling PACS Server role. Fix issue with registering UHID_START multiple times. Fix issue with pairing method not setting auto-connect. Affected Software/OS: 'bluez, iwd, libell' package(s) on Fedora 40. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-52424 https://mentor.ieee.org/802.11/dcn/24/11-24-0938-03-000m-protect-ssid-in-4-way-handshake.docx https://www.top10vpn.com/assets/2024/05/Top10VPN-x-Vanhoef-SSID-Confusion.pdf https://www.top10vpn.com/research/wifi-vulnerability-ssid/ https://www.wi-fi.org/news-events/press-releases
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.