Lucene search
Veracode Vulnerability DatabaseVERACODE:12560HistoryJan 15, 2019 - 9:18 a.m.
Information Disclosure
2019-01-1509:18:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.005 Low
EPSS
Percentile
76.6%
bluez is vulnerable to information disclosure attacks. The vulnerability exists as all versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.
| CPE | Name | Operator | Version |
|---|---|---|---|
| bluez | eq | 4.66__1.el6 | |
| bluez:3.3 | eq | 5.36-r0 |
Related
openvas
openvas
RedHat Update for bluez RHSA-2017:2685-01
2017-09-13 00:00:00
Fedora Update for bluez FEDORA-2017-fe95a5b88b
2017-09-14 00:00:00
Debian: Security Advisory (DLA-1103-1)
2018-02-06 00:00:00
nessus
nessus
Oracle Linux 6 / 7 : bluez (ELSA-2017-2685) (BlueBorne)
2017-09-13 00:00:00
Scientific Linux Security Update : bluez on SL6.x, SL7.x i386/x86_64 (20170912) (BlueBorne)
2017-09-13 00:00:00
Fedora 27 : bluez (2017-77f991e537) (BlueBorne)
2018-01-15 00:00:00
nvd
nvd
CVE-2017-1000250
2017-09-12 17:29:00
prion
prion
Information disclosure
2017-09-12 17:29:00
cvelist
cvelist
CVE-2017-1000250
2017-09-12 17:00:00
debian
debian
[SECURITY] [DSA 3972-1] bluez security update
2017-09-13 11:54:03
[SECURITY] [DSA 3972-1] bluez security update
2017-09-13 11:54:03
[SECURITY] [DLA 1103-1] bluez security update
2017-09-21 21:01:18
slackware
slackware
[slackware-security] bluez
2017-09-15 20:16:56
oraclelinux
oraclelinux
bluez security update
2017-09-13 00:00:00
osv
osv
bluez - security update
2017-09-21 00:00:00
CVE-2017-1000250
2017-09-12 17:29:00
bluez - security update
2017-09-13 00:00:00
redhat
redhat
(RHSA-2017:2685) Moderate: bluez security update
2017-09-12 14:08:48
alpinelinux
alpinelinux
CVE-2017-1000250
2017-09-12 17:29:00
mageia
mageia
Updated bluez packages fix security vulnerability
2017-09-21 16:43:32
ubuntu
ubuntu
BlueZ vulnerability
2017-09-12 00:00:00
ibm
ibm
Security Bulletin: A vulnerability in bluez affects PowerKVM
2018-06-18 01:38:35
centos
centos
bluez security update
2017-09-12 23:15:38
cve
cve
CVE-2017-1000250
2017-09-12 17:29:00
archlinux
archlinux
[ASA-201709-3] bluez: information disclosure
2017-09-12 00:00:00
fedora
fedora
[SECURITY] Fedora 26 Update: bluez-5.46-6.fc26
2017-09-13 22:26:43
[SECURITY] Fedora 27 Update: bluez-5.46-6.fc27
2017-09-30 07:32:32
redhatcve
redhatcve
CVE-2017-1000250
2017-09-12 13:24:13
ubuntucve
ubuntucve
CVE-2017-1000250
2017-09-12 00:00:00
debiancve
debiancve
CVE-2017-1000250
2017-09-12 17:29:00
thn
thn
Bluetooth Hack Affects 20 Million Amazon Echo and Google Home Devices
2017-11-15 21:43:00
myhack58
myhack58
seebug
seebug
threatpost
threatpost
Wireless 'BlueBorne' Attacks Target Billions of Bluetooth Devices
2017-09-12 09:00:09
lenovo
lenovo
Bluetooth “BlueBorne” Vulnerabilities - NL
2018-07-19 12:31:00
Bluetooth “BlueBorne” Vulnerabilities - Lenovo Support US
2019-01-23 12:42:26
cert
cert
Multiple Bluetooth implementation vulnerabilities affect many devices
2017-09-12 00:00:00
fortinet
fortinet
BlueBorne vulnerabilities and security flaws in Bluetooth stacks
2017-11-03 00:00:00
pentestit
pentestit
How to: Protect Systems From BlueBorne Attacks?
2017-09-14 21:22:24
nvidia
nvidia