CVE-2017-0785 PoC — Android Service Discovery Protocol服务器信息泄露漏洞

Source

https://github.com/RavSS/Bluetooth-Crash-CVE-2017-0785

Associated Vulnerability

Title:Android Service Discovery Protocol服务器信息泄露漏洞 (CVE-2017-0785)
Description:A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63146698.

Readme

#### CVE-2017-0785 Bluetooth module crash

This script is a modified version of https://github.com/ojasookert/CVE-2017-0785.
It leaks information via SDP due to out-of-bound bytes, but sending too many packets or search requests causes the Bluetooth 
module on an Android smartphone above Android 4.0 to crash.

This vulnerability may be similiar to CVE-2017-0781 in what it achieves. 
I believe that uses the BNEP protocol instead of the SDP protocol to cause a crash.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →