PT-2017-12948 · Google · Android Kernel

Publicado 2017-12-06 · Atualizado 2017-12-19 · CVE-2017-13164

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android kernel

Description The issue is related to an information disclosure vulnerability in the kernel binder driver.

Recommendations For Android kernel, apply the fix provided in Android ID A-36007193 to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-13164

Produtos afetados

Android Kernel

Referências · 7

• https://github.com/LineageOS/android_kernel_lge_msm8974/commit/eb8845e20a90d6ac6d14cd45ae48743b8e258fe1 · Nota
• https://github.com/LineageOS/android_kernel_lge_msm8974/commit/25509bd19f85db08188544a6a31ceb2cd4ff4cc3 · Nota
• https://source.android.com/security/bulletin/pixel/2017-12-01 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-13164 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2017-13164 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-13164 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-13164 · Nota de Segurança