CVE-2017-1000250

Publicada el 12 sep 2017 · Actualizada el 05 ago 2024

3Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 7.8%

probabilidad de explotación

7.8%top 5% de las CVE

explotación observada

noninguna fuente lo reporta

All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.

Productos afectados

n/a · n/a

Referencias

http://nvidia.custhelp.com/app/answers/detail/a_id/4561 https://access.redhat.com/errata/RHSA-2017:2685 https://access.redhat.com/security/vulnerabilities/blueborne https://www.armis.com/blueborne https://www.kb.cert.org/vuls/id/240311 https://www.synology.com/support/security/Synology_SA_17_52_BlueBorne http://www.debian.org/security/2017/dsa-3972 http://www.securityfocus.com/bid/100814