PT-2017-10648 · Google+1 · Android Kernel+1

Chenfu Bao + 2 · Publicado 2017-09-08 · Atualizado 2019-10-03 · CVE-2017-0794

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Android kernel

Description The issue is related to an elevation of privilege vulnerability in the Upstream kernel scsi driver. This affects the Android product.

Recommendations For Android kernel, apply the fix provided in Android ID A-35644812 to resolve the issue.

Correção

LPE

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2017-0794

USN-3798-1

USN-3798-2

Produtos afetados

Android Kernel

Ubuntu

Referências · 20

• https://source.android.com/security/bulletin/2017-09-01 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-3798-1 · Aviso do Fabricante
• http://securityfocus.com/bid/100667 · Nota
• https://cve.org/CVERecord?id=CVE-2017-0794 · Nota de Segurança
• https://usn.ubuntu.com/3798-2 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-7913 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-1000004 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-9518 · Aviso do Fabricante
• https://usn.ubuntu.com/3798-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-18216 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2015-8539 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-0794 · Nota de Segurança
• https://ubuntu.com/security/CVE-2018-7566 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-3798-2 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-3798-1 · Aviso do Fabricante