CVE-2017-1000250

All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.

• CWE-200

• http://nvidia.custhelp.com/app/answers/detail/a_id/4561
• http://www.debian.org/security/2017/dsa-3972
• http://www.securityfocus.com/bid/100814Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2017:2685
• https://access.redhat.com/security/vulnerabilities/blueborneNot Applicable
• https://www.armis.com/blueborneExploit, Technical Description, Third Party Advisory
• https://www.kb.cert.org/vuls/id/240311Third Party Advisory, US Government Resource
• https://www.synology.com/support/security/Synology_SA_17_52_BlueBorne
• https://access.redhat.com/security/cve/CVE-2017-1000250Issue Tracking, Third Party Advisory, VDB Entry
• http://nvidia.custhelp.com/app/answers/detail/a_id/4561
• http://www.debian.org/security/2017/dsa-3972
• http://www.securityfocus.com/bid/100814Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2017:2685
• https://access.redhat.com/security/vulnerabilities/blueborneNot Applicable
• https://www.armis.com/blueborneExploit, Technical Description, Third Party Advisory
• https://www.kb.cert.org/vuls/id/240311Third Party Advisory, US Government Resource
• https://www.synology.com/support/security/Synology_SA_17_52_BlueBorne

Published

Sep 12, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1000244Jenkins Favorite Plugin version 2.2.0 and older is vulnerabl…
• CVE-2017-1000245The SSH Plugin stores credentials which allow jobs to access…
• CVE-2017-1000246Python package pysaml2 version 4.4.0 and earlier reuses the …
• CVE-2017-1000247British Columbia Institute of Technology CodeIgniter 3.1.3 i…
• CVE-2017-1000248Redis-store <=v1.3.0 allows unsafe objects to be loaded from…
• CVE-2017-1000249An issue in file() was introduced in commit 9611f31313a93aa0…
• CVE-2017-1000251The native Bluetooth stack in the Linux Kernel (BlueZ), star…8
• CVE-2017-1000252The KVM subsystem in the Linux kernel through 4.13.3 allows …
• CVE-2017-1000253Linux distributions that have not patched their long-term ke…7.8
• CVE-2017-1000254libcurl may read outside of a heap allocated buffer when doi…
• CVE-2017-1000255On Linux running on PowerPC hardware (Power8 or later) a use…
• CVE-2017-1000256libvirt version 2.3.0 and later is vulnerable to a bad defau…8.1