The Patching Friars' AlmanacA calendar of CVE saints

February 11

SweynToothHoly card for sweyntooth, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 SweynTooth FILIUS DENTIS CAERULEI
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint SweynTooth, Son of Bluetooth

Patron of Bluetooth Low Energy devices, development kits everyone copies, and fitness bands.

Life

In February 2020 Matheus Garbelini, Sudipta Chattopadhyay and Chundong Wang of the Singapore University of Technology and Design published a family of flaws in the Bluetooth Low Energy software kits of seven chip vendors. A malformed packet sent by someone within radio range could freeze or reboot the device, and in some cases bypass its security; the victims included locks, sensors and medical devices. The name comes from Sweyn Forkbeard, son of King Harald Bluetooth.

Prayer

O Saint SweynTooth, who inherited his father's flaws, let our chips get updates even after they are sold. Amen.

How to celebrate

Celebrated by updating BLE device firmware, whenever the vendor remembers making them.

Like kit, like device.

Technical record

Disclosed on
February 11 2020
CVE
CVE-2019-16336CVE-2020-13595

The Bluetooth Low Energy implementation in Cypress PSoC 4 BLE component 3.61 and earlier processes data channel frames with a payload length larger than the configured link layer maximum RX payload size, which allows attackers (in radio range) to cause a denial of service (crash) via a crafted BLE Link Layer frame.

Sources: asset-group.github.io

Also remembered today

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.