Lucene search
RedHatRHSA-2017:2685HistorySep 12, 2017 - 2:08 p.m.
(RHSA-2017:2685) Moderate: bluez security update
2017-09-1214:08:48
access.redhat.com
52
0.005 Low
EPSS
Percentile
76.6%
The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (Red Hat), and pcmcia configuration files.
Security Fix(es):
- An information-disclosure flaw was found in the bluetoothd implementation of the Service Discovery Protocol (SDP). A specially crafted Bluetooth device could, without prior pairing or user interaction, retrieve portions of the bluetoothd process memory, including potentially sensitive information such as Bluetooth encryption keys. (CVE-2017-1000250)
Red Hat would like to thank Armis Labs for reporting this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | x86_64 | bluez | < 5.44-4.el7_4 | bluez-5.44-4.el7_4.x86_64.rpm |
| RedHat | 7 | i686 | bluez-libs-devel | < 5.44-4.el7_4 | bluez-libs-devel-5.44-4.el7_4.i686.rpm |
| RedHat | 6 | ppc64 | bluez | < 4.66-2.el6_9 | bluez-4.66-2.el6_9.ppc64.rpm |
| RedHat | 7 | x86_64 | bluez-libs | < 5.44-4.el7_4 | bluez-libs-5.44-4.el7_4.x86_64.rpm |
| RedHat | 7 | aarch64 | bluez-debuginfo | < 5.44-4.el7_4 | bluez-debuginfo-5.44-4.el7_4.aarch64.rpm |
| RedHat | 6 | ppc64 | bluez-cups | < 4.66-2.el6_9 | bluez-cups-4.66-2.el6_9.ppc64.rpm |
| RedHat | 7 | s390x | bluez-libs | < 5.44-4.el7_4 | bluez-libs-5.44-4.el7_4.s390x.rpm |
| RedHat | 6 | ppc64 | bluez-alsa | < 4.66-2.el6_9 | bluez-alsa-4.66-2.el6_9.ppc64.rpm |
| RedHat | 6 | ppc | bluez-libs | < 4.66-2.el6_9 | bluez-libs-4.66-2.el6_9.ppc.rpm |
| RedHat | 6 | ppc | bluez-libs-devel | < 4.66-2.el6_9 | bluez-libs-devel-4.66-2.el6_9.ppc.rpm |
Related
openvas
openvas
RedHat Update for bluez RHSA-2017:2685-01
2017-09-13 00:00:00
Fedora Update for bluez FEDORA-2017-fe95a5b88b
2017-09-14 00:00:00
Debian: Security Advisory (DLA-1103-1)
2018-02-06 00:00:00
nessus
nessus
Oracle Linux 6 / 7 : bluez (ELSA-2017-2685) (BlueBorne)
2017-09-13 00:00:00
Scientific Linux Security Update : bluez on SL6.x, SL7.x i386/x86_64 (20170912) (BlueBorne)
2017-09-13 00:00:00
Fedora 27 : bluez (2017-77f991e537) (BlueBorne)
2018-01-15 00:00:00
nvd
nvd
CVE-2017-1000250
2017-09-12 17:29:00
prion
prion
Information disclosure
2017-09-12 17:29:00
cvelist
cvelist
CVE-2017-1000250
2017-09-12 17:00:00
debian
debian
[SECURITY] [DSA 3972-1] bluez security update
2017-09-13 11:54:03
[SECURITY] [DSA 3972-1] bluez security update
2017-09-13 11:54:03
[SECURITY] [DLA 1103-1] bluez security update
2017-09-21 21:01:18
veracode
veracode
Information Disclosure
2019-01-15 09:18:45
slackware
slackware
[slackware-security] bluez
2017-09-15 20:16:56
ibm
ibm
Security Bulletin: A vulnerability in bluez affects PowerKVM
2018-06-18 01:38:35
ubuntu
ubuntu
BlueZ vulnerability
2017-09-12 00:00:00
centos
centos
bluez security update
2017-09-12 23:15:38
oraclelinux
oraclelinux
bluez security update
2017-09-13 00:00:00
osv
osv
bluez - security update
2017-09-21 00:00:00
CVE-2017-1000250
2017-09-12 17:29:00
bluez - security update
2017-09-13 00:00:00
alpinelinux
alpinelinux
CVE-2017-1000250
2017-09-12 17:29:00
mageia
mageia
Updated bluez packages fix security vulnerability
2017-09-21 16:43:32
cve
cve
CVE-2017-1000250
2017-09-12 17:29:00
archlinux
archlinux
[ASA-201709-3] bluez: information disclosure
2017-09-12 00:00:00
fedora
fedora
[SECURITY] Fedora 26 Update: bluez-5.46-6.fc26
2017-09-13 22:26:43
[SECURITY] Fedora 27 Update: bluez-5.46-6.fc27
2017-09-30 07:32:32
redhatcve
redhatcve
CVE-2017-1000250
2017-09-12 13:24:13
ubuntucve
ubuntucve
CVE-2017-1000250
2017-09-12 00:00:00
debiancve
debiancve
CVE-2017-1000250
2017-09-12 17:29:00
thn
thn
Bluetooth Hack Affects 20 Million Amazon Echo and Google Home Devices
2017-11-15 21:43:00
myhack58
myhack58
seebug
seebug
lenovo
lenovo
Bluetooth “BlueBorne” Vulnerabilities - NL
2018-07-19 12:31:00
Bluetooth “BlueBorne” Vulnerabilities - Lenovo Support US
2019-01-23 12:42:26
threatpost
threatpost
Wireless 'BlueBorne' Attacks Target Billions of Bluetooth Devices
2017-09-12 09:00:09
fortinet
fortinet
BlueBorne vulnerabilities and security flaws in Bluetooth stacks
2017-11-03 00:00:00
cert
cert
Multiple Bluetooth implementation vulnerabilities affect many devices
2017-09-12 00:00:00
pentestit
pentestit
How to: Protect Systems From BlueBorne Attacks?
2017-09-14 21:22:24
nvidia
nvidia