Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-3413-1
HistorySep 12, 2017 - 12:00 a.m.

BlueZ vulnerability

2017-09-1200:00:00
ubuntu.com
76

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.8

Confidence

High

EPSS

0.005

Percentile

76.7%

JSON

Releases

  • Ubuntu 17.04
  • Ubuntu 16.04 ESM
  • Ubuntu 14.04 ESM

Packages

  • bluez - Bluetooth tools and daemons

Details

It was discovered that an information disclosure vulnerability existed
in the Service Discovery Protocol (SDP) implementation in BlueZ. A
physically proximate unauthenticated attacker could use this to
disclose sensitive information. (CVE-2017-1000250)

OSVersionArchitecturePackageVersionFilename
Ubuntu17.04noarchbluez< 5.43-0ubuntu1.1UNKNOWN
Ubuntu17.04noarchbluetooth< 5.43-0ubuntu1.1UNKNOWN
Ubuntu17.04noarchbluez-cups< 5.43-0ubuntu1.1UNKNOWN
Ubuntu17.04noarchbluez-cups-dbgsym< 5.43-0ubuntu1.1UNKNOWN
Ubuntu17.04noarchbluez-dbg< 5.43-0ubuntu1.1UNKNOWN
Ubuntu17.04noarchbluez-dbgsym< 5.43-0ubuntu1.1UNKNOWN
Ubuntu17.04noarchbluez-hcidump< 5.43-0ubuntu1.1UNKNOWN
Ubuntu17.04noarchbluez-hcidump-dbgsym< 5.43-0ubuntu1.1UNKNOWN
Ubuntu17.04noarchbluez-obexd< 5.43-0ubuntu1.1UNKNOWN
Ubuntu17.04noarchbluez-obexd-dbgsym< 5.43-0ubuntu1.1UNKNOWN
Rows per page:
1-10 of 501

Related

prion 1
nessus 18
openvas 12
nvd 1
osv 3
oraclelinux 1
redhat 1
mageia 1
alpinelinux 1
debian 3
veracode 1
slackware 1
cvelist 1
ibm 1
centos 1
archlinux 1
ubuntucve 1
debiancve 1
redhatcve 1
fedora 2
cve 1
thn 2
myhack58 2
threatpost 1
lenovo 2
seebug 1
fortinet 1
cert 1
pentestit 1
nvidia 1
prion
prion
Information disclosure
2017-09-12 17:29:00
nessus
nessus
Oracle Linux 6 / 7 : bluez (ELSA-2017-2685) (BlueBorne)
2017-09-13 00:00:00
NewStart CGSL MAIN 4.05 : bluez Vulnerability (NS-SA-2019-0117)
2019-08-12 00:00:00
Virtuozzo 6 : bluez / bluez-alsa / bluez-compat / bluez-cups / etc (VZLSA-2017-2685)
2018-11-27 00:00:00
openvas
openvas
RedHat Update for bluez RHSA-2017:2685-01
2017-09-13 00:00:00
Debian: Security Advisory (DLA-1103-1)
2018-02-06 00:00:00
Ubuntu: Security Advisory (USN-3413-1)
2017-09-13 00:00:00
nvd
nvd
CVE-2017-1000250
2017-09-12 17:29:00
osv
osv
bluez - security update
2017-09-21 00:00:00
CVE-2017-1000250
2017-09-12 17:29:00
bluez - security update
2017-09-13 00:00:00
oraclelinux
oraclelinux
bluez security update
2017-09-13 00:00:00
redhat
redhat
(RHSA-2017:2685) Moderate: bluez security update
2017-09-12 14:08:48
mageia
mageia
Updated bluez packages fix security vulnerability
2017-09-21 16:43:32
alpinelinux
alpinelinux
CVE-2017-1000250
2017-09-12 17:29:00
debian
debian
[SECURITY] [DLA 1103-1] bluez security update
2017-09-21 21:01:18
[SECURITY] [DSA 3972-1] bluez security update
2017-09-13 11:54:03
[SECURITY] [DSA 3972-1] bluez security update
2017-09-13 11:54:03
veracode
veracode
Information Disclosure
2019-01-15 09:18:45
slackware
slackware
[slackware-security] bluez
2017-09-15 20:16:56
cvelist
cvelist
CVE-2017-1000250
2017-09-12 17:00:00
ibm
ibm
Security Bulletin: A vulnerability in bluez affects PowerKVM
2018-06-18 01:38:35
centos
centos
bluez security update
2017-09-12 23:15:38
archlinux
archlinux
[ASA-201709-3] bluez: information disclosure
2017-09-12 00:00:00
ubuntucve
ubuntucve
CVE-2017-1000250
2017-09-12 00:00:00
debiancve
debiancve
CVE-2017-1000250
2017-09-12 17:29:00
redhatcve
redhatcve
CVE-2017-1000250
2017-09-12 13:24:13
fedora
fedora
[SECURITY] Fedora 26 Update: bluez-5.46-6.fc26
2017-09-13 22:26:43
[SECURITY] Fedora 27 Update: bluez-5.46-6.fc27
2017-09-30 07:32:32
cve
cve
CVE-2017-1000250
2017-09-12 17:29:00
thn
thn
Bluetooth Hack Affects 20 Million Amazon Echo and Google Home Devices
2017-11-15 21:43:00
BlueBorne: Critical Bluetooth Attack Puts Billions of Devices at Risk of Hacking
2017-09-12 05:52:00
myhack58
myhack58
BlueBorne Bluetooth flaws vulnerability bug depth research and PoC-vulnerability warning-the black bar safety net
2017-09-29 00:00:00
Bluetooth agreement revealed eight major security vulnerability bug, capable of affecting fifty-three billion Bluetooth the efficacy of the equipment-vulnerability warning-the black bar safety net
2017-09-13 00:00:00
threatpost
threatpost
Wireless 'BlueBorne' Attacks Target Billions of Bluetooth Devices
2017-09-12 09:00:09
lenovo
lenovo
Bluetooth “BlueBorne” Vulnerabilities - NL
2018-07-19 12:31:00
Bluetooth “BlueBorne” Vulnerabilities - Lenovo Support US
2019-01-23 12:42:26
seebug
seebug
The IoT Attack Vector “BlueBorne” Exposes Almost Every Connected Device (BlueBorne)
2017-09-13 00:00:00
fortinet
fortinet
BlueBorne vulnerabilities and security flaws in Bluetooth stacks
2017-11-03 00:00:00
cert
cert
Multiple Bluetooth implementation vulnerabilities affect many devices
2017-09-12 00:00:00
pentestit
pentestit
How to: Protect Systems From BlueBorne Attacks?
2017-09-14 21:22:24
nvidia
nvidia
Security Bulletin: NVIDIA Tegra Jetson L4T contains multiple vulnerabilities; updates for “BlueBorne” and “Dnsmasq”.
2017-10-16 00:00:00

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.8

Confidence

High

EPSS

0.005

Percentile

76.7%

JSON
Related for USN-3413-1
prion1nessus18openvas12nvd1osv3oraclelinux1redhat1mageia1alpinelinux1debian3veracode1slackware1cvelist1ibm1centos1archlinux1ubuntucve1debiancve1redhatcve1fedora2cve1thn2myhack582threatpost1lenovo2seebug1fortinet1cert1pentestit1nvidia1