The vulnerability of the SDP protocol implementation in the Android operating system allows a perpetrator to disclose sensitive information about the system.

🗓️ 15 Sep 2017 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Android SDP protocol flaw leaks memory data and enables device compromise.

Reporter	Title	Published	Views	Family All 36
0day.today	Android Bluetooth - Blueborne Information Leak (2) Exploit	29 Apr 201800:00	–	zdt
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Google Android	22 Sep 201722:03	–	githubexploit
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Google Android	4 Oct 201720:41	–	githubexploit
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Google Android	17 Dec 202503:49	–	githubexploit
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Google Android	30 Dec 202506:17	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Google Android	21 Mar 202607:17	–	githubexploit
Gitee	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Google Android	27 Jul 202504:17	–	gitee
Gitee	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Google Android	6 Sep 202511:51	–	gitee
Circl	CVE-2017-0785	21 Sep 201711:34	–	circl
CNVD	Android SDP Server Information Disclosure Vulnerability	13 Sep 201700:00	–	cnvd

Vulners

Node

google androidMatch4.4.4

OR

google androidMatch5.0.2

OR

google androidMatch5.1.1

OR

google androidMatch6.0

OR

google androidMatch6.0.1

OR

google androidMatch7.0

OR

google androidMatch7.1.1

OR

google androidMatch7.1.2

OR

google androidMatch8.0

Source	Link
armis	www.armis.com/blueborne/
go	www.go.armis.com/hubfs/BlueBorne%20Technical%20White%20Paper.pdf
kb	www.kb.cert.org/vuls/id/240311
source	www.source.android.com/security/bulletin/2017-09-01
android	www.android.googlesource.com/platform/system/bt/+/226ea26684d4cd609a5b456d3d2cc762453c2d75
habrahabr	www.habrahabr.ru/company/cloud4y/blog/337782/
xakep	www.xakep.ru/2017/09/13/blueborne/
thehackernews	www.thehackernews.com/2017/09/blueborne-bluetooth-hacking.html
myhack58	www.myhack58.com/Article/html/3/62/2017/89258.htm
web	www.web.nvd.nist.gov/view/vuln/detail

23 Mar 2021 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 25.7

EPSS0.14195

Android operating system Session Description Protocol memory buffers sensitive information security circumvention device compromise