USN-3413-1: BlueZ vulnerability

Ubuntu Security Notice USN-3413-1

12th September, 2017

bluez vulnerability

A security issue affects these releases of Ubuntu and its
derivatives:

• Ubuntu 17.04



• Ubuntu 16.04 LTS



• Ubuntu 14.04 LTS

Summary

BlueZ could be made to expose sensitive information over bluetooth.

Software description

• bluez
  - Bluetooth tools and daemons
  
  

Details

It was discovered that an information disclosure vulnerability existed
in the Service Discovery Protocol (SDP) implementation in BlueZ. A
physically proximate unauthenticated attacker could use this to
disclose sensitive information. (











.

In general, a standard system update will make all the necessary changes.

References

CVE-2017-1000250