There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices
    does not properly handle the reception of LMP_max_slot with an invalid Baseband packet type (and
    LT_ADDRESS and LT_ADDR) after completion of the LMP setup procedure, allowing attackers in radio range to
    trigger a denial of service (firmware crash) via a crafted LMP packet. (CVE-2021-34145)

  - The Bluetooth Classic implementation in the Cypress CYW920735Q60EVB does not properly handle the reception
    of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service
    and restart (crash) of the device by flooding it with LMP_AU_Rand packets after the paging procedure.
    (CVE-2021-34146)

  - The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 does not
    properly handle the reception of a malformed LMP timing accuracy response followed by multiple
    reconnections to the link slave, allowing attackers to exhaust device BT resources and eventually trigger
    a crash via multiple attempts of sending a crafted LMP timing accuracy response followed by a sudden
    reconnection with a random BDAddress. (CVE-2021-34147)

  - The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices
    does not properly handle the reception of LMP_max_slot with a greater ACL Length after completion of the
    LMP setup procedure, allowing attackers in radio range to trigger a denial of service (firmware crash) via
    a crafted LMP packet. (CVE-2021-34148)

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - 針對 CYW20735B1 裝置 2.9.0 之前的 Cypress WICED BT 堆疊中的 Bluetooth Classic 實作在完成 LMP 設定程序後未正確處理 LMP_max_slot 接收具有無效基頻封包類型 (以及 LT_ADDRESS 和 LT_ADDR) 攻擊者因而得以在無線電範圍內透過特製的 LMP 封包觸發拒絕服務 (韌體損毀)。 (CVE-2021-34145)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - CYW20735B1 设备到 2.9.0 的 Cypress WICED BT 堆栈中的 Bluetooth Classic 实现在 LMP 设置程序完成后未正确处理接收具有无效 Baseband 数据包类型的 LMP_max_slot以及 LT_ADDRESS 和 LT_ADDR从而允许无线电范围内的攻击者以通过构建的 LMP 数据包触发拒绝服务固件崩溃。 (CVE-2021-34145)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - CYW20735B1 デバイス用の 2.9.0 までの Cypress WICED BT スタックの Bluetooth Classic 実装が、LMP セットアップ手順の完了後に、無効な Baseband パケットタイプおよび LT_ADDRESS と LT_ADDRでの LMP_max_slot の受信を適切に処理しません。これにより、無線範囲内で攻撃者が攻撃を仕掛けることが可能です。細工された LMP パケットを介してサービス拒否ファームウェアクラッシュを発生させる可能性があります。CVE-2021-34145

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices     does not properly handle the reception of LMP_max_slot with an invalid Baseband packet type (and     LT_ADDRESS and LT_ADDR) after completion of the LMP setup procedure, allowing attackers in radio range to     trigger a denial of service (firmware crash) via a crafted LMP packet. (CVE-2021-34145)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
409770	Alpine: amd-ucode, multiple linux-firmware packages: security update to 20220815-r1 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	2022/10/5	2026/7/2	medium
409770	Alpine: amd-ucode, multiple linux-firmware packages: security update to 20220815-r1 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2022/10/5	2026/7/2	medium
256933	Linux Distros 未修補的弱點：CVE-2021-34145	Nessus	Misc.	2025/8/27	2025/8/27	medium
256933	Linux Distros 未修补的漏洞：CVE-2021-34145	Nessus	Misc.	2025/8/27	2025/8/27	medium
256933	Linux Distros のパッチ未適用の脆弱性: CVE-2021-34145	Nessus	Misc.	2025/8/27	2025/8/27	medium
256933	Linux Distros Unpatched Vulnerability : CVE-2021-34145	Nessus	Misc.	2025/8/27	2025/8/27	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium