VDB
CVE-2017-1000250
CVE-2017-1000250
PUBLISHED
CVSS 6.5 MEDIUM
All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.
EPSS 7.77% · 94.4th percentile
Risk Scores
CVSS 3.0
6.5
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
7.77%
94.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:16.04:LTS | bluez | 0, 5.36-0ubuntu1, 5.37-0ubuntu5 |
| Ubuntu:14.04:LTS | bluez | 4.101-0ubuntu10, 0, 4.101-0ubuntu8b1 |
Timeline
- Sep 12, 2017 CVE Published
- Apr 14, 2021 EPSS Score
- Aug 25, 2021 EPSS Score
- Dec 29, 2021 EPSS Score
- Mar 1, 2022 EPSS Score
- Jul 5, 2022 EPSS Score
- Sep 7, 2022 EPSS Score
- Jan 11, 2023 EPSS Score
- Mar 15, 2023 EPSS Score
- Jul 19, 2023 EPSS Score
- Nov 21, 2023 EPSS Score
- Mar 26, 2024 EPSS Score
References
- https://ubuntu.com/security/CVE-2017-1000250 third-party-advisory
- https://www.armis.com/blueborne third-party-advisory
- https://ubuntu.com/security/notices/USN-3413-1 vendor-advisory
- https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/BlueBorne third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2017-1000250 third-party-advisory