NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

VulnerabilityPoC1 · 1 read

CVE-2017-1000250

CVSS 3.0: 6.5 medium
EPSS: 8%p94
Published: Sep 12, 2017 · Sep 12, 2017
Modified: Jun 17, 2026

Analyze CVE-2017-1000250 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.

Vendors: bluez

Products: bluez

Weakness: CWE-200

Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (7.8%)

In the news

4 stories

Billions of Bluetooth-enabled devices vulnerable to new airborne attacks

Help Net SecurityJan 8, 12:40 UTC · Jan 8, 2024Exploit / PoCCVE-2017-1000251 CVE-2017-1000250 CVE-2017-0785+52 · 1 read

60

20 Million Google Home and Amazon Echo devices are affected by Millions of AI-based voice-activated personal assistants, including Google Home and Amazon Echo, are affected by the Blueborne flaws

Security AffairsNov 17, 07:53 UTC · Nov 17, 2017Exploit / PoCCVE-2017-1000251 CVE-2017-1000250 CVE-2017-07852

60

Bluetooth Hack Affects 20 Million Amazon Echo and Google Home Devices

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2017Exploit / PoCCVE-2017-1000251 CVE-2017-1000250 CVE-2017-07852 · 1 read

60

BlueBorne: Critical Bluetooth Attack Puts Billions of Devices at Risk of Hacking

The Hacker NewsSep 12, 17:53 UTC · Sep 12, 2017RansomwareCVE-2017-0785 CVE-2017-0781 CVE-2017-0782+42

60