PT-2016-5708 · Google · Android

Makoto Onuki · Publicado 2016-09-11 · Atualizado 2017-08-13 · CVE-2016-3876

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android versions 6.x through 7.0 before 2016-09-01

Description The issue allows physically proximate attackers to bypass the SAFE BOOT DISALLOWED protection mechanism and boot to safe mode via the Android Debug Bridge (adb) tool.

Recommendations For Android versions 6.x through 7.0, update to a version released after 2016-09-01 to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2016-3876

Produtos afetados

Android

Referências · 9

• https://ubuntu.com/security/CVE-2016-3876 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2016-3876 · Nota de Segurança
• http://securitytracker.com/id/1036763 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-3876 · Nota de Segurança
• http://source.android.com/security/bulletin/2016-09-01.html · Aviso do Fabricante
• https://android.googlesource.com/platform/frameworks/base/+/91fc934bb2e5ea59929bb2f574de6db9b5100745 · Correção
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-3876 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-3876 · Aviso do Fabricante
• http://securityfocus.com/bid/92819 · Nota