PT-2017-11680 · Linux · Linux Kernel

Publicado 2017-11-16 · Atualizado 2019-10-03 · CVE-2017-11012

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A stack-based buffer overflow can occur when processing a specially crafted QCA NL80211 VENDOR SUBCMD ENCRYPTION TEST cfg80211 vendor command. This issue affects Android releases from CAF using the Linux kernel.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2017-11012

Produtos afetados

Linux Kernel

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2017-11012 · Nota de Segurança
• https://source.android.com/security/bulletin/pixel/2017-11-01 · Aviso do Fabricante