# MA-681.092017: MyCERT Alert - BlueBorne Bluetooth Vulnerabilities

**Date:** 18 Sep 2017  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-681.092017  
**Advisory ID:** MA-681.092017

---

**1.0 Introduction**
MyCERT is aware of a collection of Bluetooth vulnerabilities, known as BlueBorne, potentially affecting millions of unpatched mobile phones, computers, and Internet of Things (IoT) devices. The vulnerabilities are as listed below:
• Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') - CVE-2017-1000251
• Out-of-bounds Read - CVE-2017-1000250
• Out-of-bounds Read - CVE-2017-0785
• Heap-based Buffer Overflow - CVE-2017-0781
• Integer Underflow (Wrap or Wraparound) - CVE-2017-0782
• Heap-based Buffer Overflow- CVE-2017-14315
**2.0 Impact**
A remote attacker could exploit several of these vulnerabilities to take control of affected devices.
**3.0 Affected Products**
This vulnerability affects unpatched operating systems, mobile phones and IT devices. For more detail list of affected operating systems (Android, Windows, Linux), kindly refer to the below URL:
• <https://www.jpcert.or.jp/english/at/2017/at170037.html>
**4.0 Recommendations**
• Apply an update.
Patches are available in the latest releases of Windows, iOS, the Linux kernel, and Android. Check with your device manufacturer to determine if firmware updates will be available.
• Disable Bluetooth on your device.
Affected users should consider disabling Bluetooth on affected devices if Bluetooth is unused or unnecessary.
Users and administrators are recommended to review the below URL for more information about this vulnerability and the solution:
• <https://www.kb.cert.org/vuls/id/240311>
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor, apply necessary updates and follow best practice security policies.
For further enquiries, please contact MyCERT through the following channels:
E-mail: [[email protected]](/cdn-cgi/l/email-protection#bfdcc6dddacd868686ffdcc6dddacdccdadccacdd6cbc691d2c6) or [[email protected]](/cdn-cgi/l/email-protection#80edf9e3e5f2f4c0edf9e3e5f2f4aeeff2e7aeedf9)
Phone: 1-300-88-2999 (monitored during business hours)
Fax: +603 89453442
Mobile: +60 19 2665850 (24x7 call incident reporting)
SMS: CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours: Mon - Fri 09:00 AM - 18:00 PM MYT
Web: <https://www.mycert.org.my>
Twitter: <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps: [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0 References**
• <https://www.us-cert.gov/ncas/current-activity/2017/09/12/BlueBorne-Bluetooth-Vulnerabilities>
• <https://www.kb.cert.org/vuls/id/240311>
• <https://www.jpcert.or.jp/english/at/2017/at170037.html>