PT-2017-11700 · Linux · Linux Kernel

Publicado 2017-11-16 · Atualizado 2019-10-03 · CVE-2017-11038

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns the processing of the boot image header in the Linux kernel, used by various Android releases from CAF. It is possible to bypass range checks by supplying different versions of the header at the time of the check and use.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2017-11038

Produtos afetados

Linux Kernel

Referências · 2

• https://source.android.com/security/bulletin/pixel/2017-11-01 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-11038 · Nota de Segurança