CVE-2017-1000251

PoC —

CVSS 3.1

8.0 high

EPSS

16%p97

Published

Sep 12, 2017 (Sep 12, 2017)

Modified

Jun 17, 2026

Description

The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space.

Vendors: linux debian nvidia redhat
Products: linux kernel, debian linux, jetson tk1, jetson tx1, enterprise linux desktop, enterprise linux server, enterprise linux server aus, enterprise linux server eus, enterprise linux server tus, enterprise linux workstation
Weakness: CWE-787
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (16.2%)

In the news4 stories

Billions of Bluetooth-enabled devices vulnerable to new airborne attacks

Help Net SecurityJan 8, 12:40 UTC · Jan 8, 2024Exploit / PoC CVE-2017-1000251 CVE-2017-1000250 CVE-2017-0785+5 CVEs

20 Million Google Home and Amazon Echo devices are affected by Millions of AI-based voice-activated personal assistants, including Google Home and Amazon Echo, are affected by the Blueborne flaws

Security AffairsNov 17, 07:53 UTC · Nov 17, 2017Exploit / PoC CVE-2017-1000251 CVE-2017-1000250 CVE-2017-0785

Bluetooth Hack Affects 20 Million Amazon Echo and Google Home Devices

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2017Exploit / PoC CVE-2017-1000251 CVE-2017-1000250 CVE-2017-0785

BlueBorne: Critical Bluetooth Attack Puts Billions of Devices at Risk of Hacking

The Hacker NewsSep 12, 17:53 UTC · Sep 12, 2017Ransomware CVE-2017-0785 CVE-2017-0781 CVE-2017-0782+4 CVEs