Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-1000250

Опубликовано: 12 сент. 2017
Источник: debian
EPSS Средний

Описание

All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
bluezfixed5.46-1package

Примечания

  • https://www.armis.com/blueborne/

  • https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=9e009647b14e810e06626dde7f1bb9ea3c375d09

EPSS

Процентиль: 97%
0.39931
Средний

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 8 лет назад

All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.

CVSS3: 6.5
redhat
около 8 лет назад

All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.

CVSS3: 6.5
nvd
около 8 лет назад

All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.

CVSS3: 6.5
github
больше 3 лет назад

All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.

oracle-oval
около 8 лет назад

ELSA-2017-2685: bluez security update (MODERATE)

EPSS

Процентиль: 97%
0.39931
Средний