Every CVE Search/ Get API key

CVE-2017-1000250

All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information...

6.5 MediumPublic exploitFix available

All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.

Attack profile

How easy it is to exploit

Attack vector
Adjacent network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

7.77%Down 1.9 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 6.5

All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.

Record
CVE-2017-1000250
CVSS 3.0
6.5 MediumCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0
3.3 LowAV:A/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
CVE List No score

All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.

Record
CVE-2017-1000250
Updated
2026-11-02
EUVDEUVD-2017-1511 No score

All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.

Record
EUVD-2017-1511
Updated
2026-11-03
GitHub AdvisoriesGHSA-6fxm-r64m-667w 6.5

All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information...

All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.

Record
GHSA-6fxm-r64m-667w
CVSS 3.0
6.5 MediumCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
OSVALPINE-CVE-2017-1000250 6.5

All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.

Record
ALPINE-CVE-2017-1000250
CVSS 3.0
6.5 MediumCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSV 6.5

All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.

Record
CVE-2017-1000250
CVSS 3.0
6.5 MediumCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
Show 7 moreShow less
OSVDEBIAN-CVE-2017-1000250 6.5

All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.

Record
DEBIAN-CVE-2017-1000250
CVSS 3.0
6.5 MediumCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2017:2685 6.5

Red Hat Security Advisory: bluez security update

Record
RHSA-2017:2685
CVSS 3.0
6.5 MediumCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2017-1000250 6.5

All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.

Record
UBUNTU-CVE-2017-1000250
CVSS 3.0
6.5 MediumCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVMGASA-2017-0350 No score

Updated bluez packages fix security vulnerability

An information-disclosure flaw was found in the bluetoothd implementation of the Service Discovery Protocol (SDP). A specially crafted Bluetooth device could, without prior pairing or user interaction, retrieve portions of the bluetoothd process memory, including potentially sensitive information such as Bluetooth encryption keys (CVE-2017-1000250).

Record
MGASA-2017-0350
Updated
2026-11-02
OSVSUSE-SU-2018:1778-1 No score

Security update for bluez

This update for bluez fixes the following issues:

Security issues fixed:

  • CVE-2016-9800: Fix hcidump memory leak in pin_code_reply_dump() (bsc#1013721).
  • CVE-2016-9804: Fix hcidump buffer overflow in commands_dump() (bsc#1013877).
  • CVE-2016-7837: Fix possible buffer overflow, make sure we don't write past the end of the array (bsc#1026652).
  • CVE-2017-1000250: Fix information disclosure vulnerability in service_search_attr_req (bsc#1057342).
Record
SUSE-SU-2018:1778-1
Updated
2026-11-02
OSVSUSE-SU-2019:0510-1 No score

Security update for bluez

This update for bluez fixes the following issues:

Security issues fixed:

  • CVE-2016-7837: Fixed possible buffer overflow, make sure we don't write past the end of the array.(bsc#1026652)
  • CVE-2016-9800: Fix hcidump memory leak in pin_code_reply_dump() (bsc#1013721).
  • CVE-2016-9801: Fixed a buffer overflow in set_ext_ctrl function (bsc#1013732)
  • CVE-2016-9804: Fix hcidump buffer overflow in commands_dump() (bsc#1013877).
  • CVE-2016-9918: Fixed an out-of-bounds read in packet_hexdump() (bsc#1015173)
  • CVE-2017-1000250: Fixed a information leak in SDP (part of the recently published BlueBorne vulnerabilities) (bsc#1057342)
Record
SUSE-SU-2019:0510-1
Updated
2026-11-02
OSVUSN-3413-1 No score

bluez vulnerability

It was discovered that an information disclosure vulnerability existed in the Service Discovery Protocol (SDP) implementation in BlueZ. A physically proximate unauthenticated attacker could use this to disclose sensitive information. (CVE-2017-1000250)

Record
USN-3413-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bluez
Alpine:v3.3
 before 5.36-r1
5.36-r1
bluez
Alpine:v3.4
 before 5.40-r1
5.40-r1
bluez
Alpine:v3.5
 before 5.42-r1
5.42-r1
bluez
Alpine:v3.6
 before 5.44-r3
5.44-r3
bluez
Debian:12
 before 5.46-1
5.46-1
bluez
Debian:13
 before 5.46-1
5.46-1
bluez
Debian:14
 before 5.46-1
5.46-1
bluez
Debian:7
 before 4.99-2+deb7u1, plus listed versions
4.99-2
4.99-2+deb7u1
bluez
Debian:8
 before 5.23-2+deb8u1, plus listed versions
5.23-2
5.23-2+deb8u1
bluez
Debian:9
 before 5.43-2+deb9u1, plus listed versions
5.43-2
5.43-2+deb9u1
Show 68 moreShow less
Affected packages
PackageAffectedFixed
bluez
Mageia:5
 before 5.28-1.1.mga5
5.28-1.1.mga5
bluez
Mageia:6
 before 5.45-2.1.mga6
5.45-2.1.mga6
bluez
Red Hat:enterprise_linux:6::client
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez-libs
Red Hat:enterprise_linux:6::client
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez-alsa
Red Hat:enterprise_linux:6::client
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez-compat
Red Hat:enterprise_linux:6::client
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez-cups
Red Hat:enterprise_linux:6::client
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez-gstreamer
Red Hat:enterprise_linux:6::client
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez-libs-devel
Red Hat:enterprise_linux:6::client
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez
Red Hat:enterprise_linux:6::computenode
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez-alsa
Red Hat:enterprise_linux:6::computenode
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez-compat
Red Hat:enterprise_linux:6::computenode
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez-cups
Red Hat:enterprise_linux:6::computenode
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez-gstreamer
Red Hat:enterprise_linux:6::computenode
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez-libs
Red Hat:enterprise_linux:6::computenode
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez-libs-devel
Red Hat:enterprise_linux:6::computenode
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez
Red Hat:enterprise_linux:6::server
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez-libs
Red Hat:enterprise_linux:6::server
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez-alsa
Red Hat:enterprise_linux:6::server
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez-compat
Red Hat:enterprise_linux:6::server
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez-cups
Red Hat:enterprise_linux:6::server
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez-gstreamer
Red Hat:enterprise_linux:6::server
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez-libs-devel
Red Hat:enterprise_linux:6::server
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez
Red Hat:enterprise_linux:6::workstation
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez-libs
Red Hat:enterprise_linux:6::workstation
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez-alsa
Red Hat:enterprise_linux:6::workstation
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez-compat
Red Hat:enterprise_linux:6::workstation
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez-cups
Red Hat:enterprise_linux:6::workstation
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez-gstreamer
Red Hat:enterprise_linux:6::workstation
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez-libs-devel
Red Hat:enterprise_linux:6::workstation
 before 0:4.66-2.el6_9
0:4.66-2.el6_9
bluez
Red Hat:enterprise_linux:7::client
 before 0:5.44-4.el7_4
0:5.44-4.el7_4
bluez-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:5.44-4.el7_4
0:5.44-4.el7_4
bluez-libs
Red Hat:enterprise_linux:7::client
 before 0:5.44-4.el7_4
0:5.44-4.el7_4
bluez-cups
Red Hat:enterprise_linux:7::client
 before 0:5.44-4.el7_4
0:5.44-4.el7_4
bluez-hid2hci
Red Hat:enterprise_linux:7::client
 before 0:5.44-4.el7_4
0:5.44-4.el7_4
bluez-libs-devel
Red Hat:enterprise_linux:7::client
 before 0:5.44-4.el7_4
0:5.44-4.el7_4
bluez
Red Hat:enterprise_linux:7::computenode
 before 0:5.44-4.el7_4
0:5.44-4.el7_4
bluez-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:5.44-4.el7_4
0:5.44-4.el7_4
bluez-libs
Red Hat:enterprise_linux:7::computenode
 before 0:5.44-4.el7_4
0:5.44-4.el7_4
bluez-cups
Red Hat:enterprise_linux:7::computenode
 before 0:5.44-4.el7_4
0:5.44-4.el7_4
bluez-hid2hci
Red Hat:enterprise_linux:7::computenode
 before 0:5.44-4.el7_4
0:5.44-4.el7_4
bluez-libs-devel
Red Hat:enterprise_linux:7::computenode
 before 0:5.44-4.el7_4
0:5.44-4.el7_4
bluez
Red Hat:enterprise_linux:7::server
 before 0:5.44-4.el7_4
0:5.44-4.el7_4
bluez-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:5.44-4.el7_4
0:5.44-4.el7_4
bluez-libs
Red Hat:enterprise_linux:7::server
 before 0:5.44-4.el7_4
0:5.44-4.el7_4
bluez-cups
Red Hat:enterprise_linux:7::server
 before 0:5.44-4.el7_4
0:5.44-4.el7_4
bluez-hid2hci
Red Hat:enterprise_linux:7::server
 before 0:5.44-4.el7_4
0:5.44-4.el7_4
bluez-libs-devel
Red Hat:enterprise_linux:7::server
 before 0:5.44-4.el7_4
0:5.44-4.el7_4
bluez
Red Hat:enterprise_linux:7::workstation
 before 0:5.44-4.el7_4
0:5.44-4.el7_4
bluez-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:5.44-4.el7_4
0:5.44-4.el7_4
bluez-libs
Red Hat:enterprise_linux:7::workstation
 before 0:5.44-4.el7_4
0:5.44-4.el7_4
bluez-cups
Red Hat:enterprise_linux:7::workstation
 before 0:5.44-4.el7_4
0:5.44-4.el7_4
bluez-hid2hci
Red Hat:enterprise_linux:7::workstation
 before 0:5.44-4.el7_4
0:5.44-4.el7_4
bluez-libs-devel
Red Hat:enterprise_linux:7::workstation
 before 0:5.44-4.el7_4
0:5.44-4.el7_4
bluez
SUSE:Linux Enterprise Desktop 12 SP3
From an advisory covering 4 CVEs
 before 5.13-5.4.1
5.13-5.4.1
bluez
SUSE:Linux Enterprise Software Development Kit 12 SP3
From an advisory covering 4 CVEs
 before 5.13-5.4.1
5.13-5.4.1
bluez
SUSE:Linux Enterprise Server 12 SP3
From an advisory covering 4 CVEs
 before 5.13-5.4.1
5.13-5.4.1
bluez
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 4 CVEs
 before 5.13-5.4.1
5.13-5.4.1
bluez
SUSE:Linux Enterprise Workstation Extension 12 SP3
From an advisory covering 4 CVEs
 before 5.13-5.4.1
5.13-5.4.1
bluez
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
From an advisory covering 6 CVEs
 before 5.13-3.10.1
5.13-3.10.1
bluez
SUSE:Linux Enterprise Server 12-LTSS
From an advisory covering 6 CVEs
 before 5.13-3.10.1
5.13-3.10.1
bluez
SUSE:Linux Enterprise Server 12 SP1-LTSS
From an advisory covering 6 CVEs
 before 5.13-3.10.1
5.13-3.10.1
bluez
Ubuntu:14.04:LTS
 before 4.101-0ubuntu13.3, plus listed versions
4.101-0ubuntu8b14.101-0ubuntu94.101-0ubuntu104.101-0ubuntu114.101-0ubuntu124.101-0ubuntu134.101-0ubuntu13.1
4.101-0ubuntu13.3
bluez
Ubuntu:16.04:LTS
 before 5.37-0ubuntu5.1, plus listed versions
5.35-0ubuntu25.36-0ubuntu15.37-0ubuntu5
5.37-0ubuntu5.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubolav-st/CVE-2017-1000250-PoC2017-11-12

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-1000250 is a medium vulnerability (CVSS 6.5) in Bluez, published September 12, 2017. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.77%, the 94th percentile. Fixed in bluez 5.36-r1.

References

Show 30 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open