CVE-2017-1000250

PoC —

CVSS 3.0

6.5 medium

EPSS

8%p94

Published

Sep 12, 2017 (Sep 12, 2017)

Modified

Jun 17, 2026

Description

All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.

Vendors: bluez
Products: bluez
Weakness: CWE-200
Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (7.8%)

In the news4 stories

Billions of Bluetooth-enabled devices vulnerable to new airborne attacks

Help Net SecurityJan 8, 12:40 UTC · Jan 8, 2024Exploit / PoC CVE-2017-1000251 CVE-2017-1000250 CVE-2017-0785+5 CVEs

20 Million Google Home and Amazon Echo devices are affected by Millions of AI-based voice-activated personal assistants, including Google Home and Amazon Echo, are affected by the Blueborne flaws

Security AffairsNov 17, 07:53 UTC · Nov 17, 2017Exploit / PoC CVE-2017-1000251 CVE-2017-1000250 CVE-2017-0785

Bluetooth Hack Affects 20 Million Amazon Echo and Google Home Devices

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2017Exploit / PoC CVE-2017-1000251 CVE-2017-1000250 CVE-2017-0785

BlueBorne: Critical Bluetooth Attack Puts Billions of Devices at Risk of Hacking

The Hacker NewsSep 12, 17:53 UTC · Sep 12, 2017Ransomware CVE-2017-0785 CVE-2017-0781 CVE-2017-0782+4 CVEs