PT-2016-2474 · Google · Android

Guang Gong + 1 · Publicado 2016-07-11 · Atualizado 2016-07-11 · CVE-2016-3744

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Android versions prior to 4.4.4 Android 5.0.x versions prior to 5.0.2 Android 5.1.x versions prior to 5.1.1 Android 6.x versions prior to 2016-07-01

Description The issue is caused by a buffer overflow in the create pbuf function in the Bluetooth component of Android. This allows remote attackers to gain privileges via a crafted pairing operation.

Recommendations For Android versions prior to 4.4.4, update to version 4.4.4 or later. For Android 5.0.x versions prior to 5.0.2, update to version 5.0.2 or later. For Android 5.1.x versions prior to 5.1.1, update to version 5.1.1 or later. For Android 6.x versions prior to 2016-07-01, update to a version released after 2016-07-01.

Correção

Race Condition

Buffer Overflow

Enumeração de Fraquezas

CWE-362

CWE-119

Identificadores relacionados

BDU:2016-01865

CVE-2016-3744

Produtos afetados

Android

Referências · 8

• http://source.android.com/security/bulletin/2016-07-01.html · Aviso do Fabricante
• https://android.googlesource.com/platform/system/bt/+/514139f4b40cbb035bb92f3e24d5a389d75db9e6 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-3744 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-3744 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-3744 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2016-3744 · Nota de Segurança
• https://bdu.fstec.ru/vul/2016-01865 · Nota de Segurança
• https://ubuntu.com/security/CVE-2016-3744 · Aviso do Fabricante