CVE-2017-1000250: All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulner...

Security readout for executives and security teams

This CVE is a Bluetooth information disclosure issue in the BlueZ SDP server. A nearby remote attacker could cause bluetoothd to disclose sensitive process memory through crafted SDP search attribute handling. The source bundle does not provide CVSS scoring or confirmed active exploitation. Linux systems and appliances using BlueZ 5.46 or earlier with Bluetooth enabled may be exposed, especially where devices are discoverable or reachable over local Bluetooth radio range. Vendor advisories indicate multiple downstream products assessed or shipped fixes. Prioritize remediation where Bluetooth is enabled on laptops, servers, embedded devices, or appliances handling sensitive data. The business risk is unauthorized memory disclosure from a system process, with practical exposure limited by Bluetooth range and affected software versions. Mitigation focus: Install vendor security updates for BlueZ or affected product firmware.; Disable Bluetooth where it is not operationally required.; Review Red Hat, Debian, Synology, and NVIDIA advisories for platform-specific guidance..

Prepared

Jun 12, 2026, 21:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.