p PatchFirst

CVE-2017-1000250

CVE-2017-1000250

This page contains facts from public vulnerability sources. Check the original advisory before updating.

All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.

CVSS 6.5 · Medium · EPSS 7.8% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • bluez Debian:12

    Affected ranges
    • ECOSYSTEM: < 5.46-1

    Update to 5.46-1

  • bluez Debian:13

    Affected ranges
    • ECOSYSTEM: < 5.46-1

    Update to 5.46-1

  • bluez Debian:14

    Affected ranges
    • ECOSYSTEM: < 5.46-1

    Update to 5.46-1

  • bluez Ubuntu:14.04:LTS

    Versions
    • 4.101-0ubuntu8b1
    • 4.101-0ubuntu9
    • 4.101-0ubuntu10
    • 4.101-0ubuntu11
    • 4.101-0ubuntu12
    • 4.101-0ubuntu13
    • 4.101-0ubuntu13.1
    Affected ranges
    • ECOSYSTEM: < 4.101-0ubuntu13.3

    Update to 4.101-0ubuntu13.3

  • bluez Ubuntu:16.04:LTS

    Versions
    • 5.35-0ubuntu2
    • 5.36-0ubuntu1
    • 5.37-0ubuntu5
    Affected ranges
    • ECOSYSTEM: < 5.37-0ubuntu5.1

    Update to 5.37-0ubuntu5.1

Original sources

Check your server →