PT-2017-1021 · Google · Android

Publicado 2017-01-12 · Atualizado 2017-01-24 · CVE-2016-8442

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Android versions Kernel 3.18

Description The issue is related to insufficient input validation, which could allow unauthorized memory access in the hypervisor. This may enable a local attacker to access hypervisor memory using the HLOS.

Recommendations For Android version Kernel 3.18, consider restricting access to the hypervisor memory as a temporary mitigation measure until a patch is available.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2017-00056

CVE-2016-8442

Produtos afetados

Android

Referências · 5

• https://bdu.fstec.ru/vul/2017-00056 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2016-8442 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-8442 · Aviso do Fabricante
• https://source.android.com/security/bulletin/2017-01-01.html · Aviso do Fabricante
• http://securityfocus.com/bid/95227 · Nota