Summary
It was discovered that an information disclosure vulnerability existed
in the Service Discovery Protocol (SDP) implementation in BlueZ. A
physically proximate unauthenticated attacker could use this to
disclose sensitive information. (CVE-2017-1000250)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | bluez | 4.101-0ubuntu13.3 |
| Ubuntu · 16.04 LTS 16.04:LTS | bluez | 5.37-0ubuntu5.1 |
Vulnerabilities 1
-
Unscored —CVE-2017-1000250 Public exploit
All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability whic…
References
-
report
https://ubuntu.com/security/CVE-2017-1000250