Bug 1057342 - (CVE-2017-1000250) VUL-0: CVE-2017-1000250: bluez: information disclosure vulnerability in service_search_attr_req
(CVE-2017-1000250)
VUL-0: CVE-2017-1000250: bluez: information disclosure vulnerability in servi...
Status: RESOLVED FIXED
Classification: Novell Products
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents
unspecified
Other Other
: P3 - Medium : Normal
: ---
Assigned To: Security Team bot
Security Team bot
https://smash.suse.de/issue/191486/
CVSSv2:SUSE:CVE-2017-1000250:2.6:(AV:...
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2017-09-06 07:09 UTC by Marcus Meissner
Modified: 2022-06-10 13:27 UTC (History)
8 users (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Comment 6 Marcus Meissner 2017-09-08 09:30:53 UTC
CRD: 2017-09-12
Comment 7 Marcus Meissner 2017-09-09 13:05:25 UTC
CVE-2017-1000250 was asssigned here
Comment 8 Vítězslav Čížek 2017-09-12 14:43:59 UTC
Public: http://go.armis.com/hubfs/BlueBorne%20Technical%20White%20Paper.pdf
Comment 11 Bernhard Wiedemann 2017-09-18 08:02:47 UTC
This is an autogenerated message for OBS integration:
This bug (1057342) was mentioned in
https://build.opensuse.org/request/show/526951 Factory / bluez
Comment 18 Bernhard Wiedemann 2017-10-11 10:01:08 UTC
This is an autogenerated message for OBS integration:
This bug (1057342) was mentioned in
https://build.opensuse.org/request/show/533364 42.2 / bluez
https://build.opensuse.org/request/show/533365 42.3 / bluez
Comment 19 Swamp Workflow Management 2017-10-20 16:18:12 UTC
openSUSE-SU-2017:2810-1: An update that fixes two vulnerabilities is now available.

Category: security (moderate)
Bug References: 1026652,1057342
CVE References: CVE-2016-7837,CVE-2017-1000250
Sources used:
openSUSE Leap 42.3 (src):    bluez-5.41-6.1
openSUSE Leap 42.2 (src):    bluez-5.41-2.5.1
Comment 20 Johannes Segitz 2018-05-24 12:06:58 UTC
Thank you for the submissions. We still track this for
SUSE:SLE-11-SP1:Update 
SUSE:SLE-11-SP3:Update 
Can you please submit here too?
Comment 21 Swamp Workflow Management 2018-06-21 16:34:27 UTC
SUSE-SU-2018:1778-1: An update that fixes four vulnerabilities is now available.

Category: security (moderate)
Bug References: 1013721,1013877,1026652,1057342
CVE References: CVE-2016-7837,CVE-2016-9800,CVE-2016-9804,CVE-2017-1000250
Sources used:
SUSE Linux Enterprise Workstation Extension 12-SP3 (src):    bluez-5.13-5.4.1
SUSE Linux Enterprise Software Development Kit 12-SP3 (src):    bluez-5.13-5.4.1
SUSE Linux Enterprise Server 12-SP3 (src):    bluez-5.13-5.4.1
SUSE Linux Enterprise Desktop 12-SP3 (src):    bluez-5.13-5.4.1
Comment 28 Swamp Workflow Management 2019-02-28 14:10:02 UTC
SUSE-SU-2019:0510-1: An update that fixes 6 vulnerabilities is now available.

Category: security (moderate)
Bug References: 1013721,1013732,1013877,1015173,1026652,1057342
CVE References: CVE-2016-7837,CVE-2016-9800,CVE-2016-9801,CVE-2016-9804,CVE-2016-9918,CVE-2017-1000250
Sources used:
SUSE Linux Enterprise Server for SAP 12-SP1 (src):    bluez-5.13-3.10.1
SUSE Linux Enterprise Server 12-SP1-LTSS (src):    bluez-5.13-3.10.1
SUSE Linux Enterprise Server 12-LTSS (src):    bluez-5.13-3.10.1
Comment 29 Carlos López 2022-06-10 13:27:07 UTC
Done, closing.