PT-2017-12950 · Google+3 · Android Kernel+3

Publicado 2017-12-06 · Atualizado 2019-10-03 · CVE-2017-13166

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Android kernel

Description The issue is related to an elevation of privilege vulnerability in the kernel v4l2 video driver.

Recommendations For Android kernel, apply the fix provided in Android ID A-34624167 to resolve the issue.

Exploit

Correção

LPE

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CESA-2018_1062

CESA-2018_1319

CVE-2017-13166

DLA-1369-1

DSA-4120-1

DSA-4120-2

DSA-4187-1

OPENSUSE-SU-2018_0781-1

RHSA-2018:0676

RHSA-2018:1062

RHSA-2018:1130

RHSA-2018:1170

RHSA-2018:1319

RHSA-2018:2948

RHSA-2018_0676

RHSA-2018_1062

RHSA-2018_1319

SUSE-SU-2018:0785-1

SUSE-SU-2018:0786-1

SUSE-SU-2018:0834-1

SUSE-SU-2018:0848-1

SUSE-SU-2018:0986-1

SUSE-SU-2018:0988-1

SUSE-SU-2018:0989-1

SUSE-SU-2018:0990-1

SUSE-SU-2018:0992-1

SUSE-SU-2018:0993-1

SUSE-SU-2018:0994-1

SUSE-SU-2018:0995-1

SUSE-SU-2018:0996-1

SUSE-SU-2018:0997-1

SUSE-SU-2018:0998-1

SUSE-SU-2018:0999-1

SUSE-SU-2018:1000-1

SUSE-SU-2018:1001-1

SUSE-SU-2018:1002-1

SUSE-SU-2018:1003-1

SUSE-SU-2018:1004-1

SUSE-SU-2018:1005-1

SUSE-SU-2018:1006-1

SUSE-SU-2018:1007-1

SUSE-SU-2018:1008-1

SUSE-SU-2018:1009-1

SUSE-SU-2018:1010-1

SUSE-SU-2018:1011-1

SUSE-SU-2018:1012-1

SUSE-SU-2018:1013-1

SUSE-SU-2018:1014-1

SUSE-SU-2018:1015-1

SUSE-SU-2018:1016-1

SUSE-SU-2018:1018-1

SUSE-SU-2018:1019-1

SUSE-SU-2018:1020-1

SUSE-SU-2018:1021-1

SUSE-SU-2018:1022-1

SUSE-SU-2018:1023-1

SUSE-SU-2018:1024-1

SUSE-SU-2018:1025-1

SUSE-SU-2018:1026-1

SUSE-SU-2018:1027-1

SUSE-SU-2018:1028-1

SUSE-SU-2018:1029-1

SUSE-SU-2018:1030-1

SUSE-SU-2018:1031-1

SUSE-SU-2018:1032-1

SUSE-SU-2018:1033-1

SUSE-SU-2018:1034-1

SUSE-SU-2018:1080-1

SUSE-SU-2018:1172-1

SUSE-SU-2018:1309-1

SUSE-SU-2018:1505-1

SUSE-SU-2018:1506-1

SUSE-SU-2018:1509-1

SUSE-SU-2018:1510-1

SUSE-SU-2018:1511-1

SUSE-SU-2018:1512-1

SUSE-SU-2018:1514-1

SUSE-SU-2018:1516-1

SUSE-SU-2018:1517-1

SUSE-SU-2018:1518-1

SUSE-SU-2018:1519-1

SUSE-SU-2018:1520-1

SUSE-SU-2018:1521-1

SUSE-SU-2018:1522-1

SUSE-SU-2018:1524-1

SUSE-SU-2018:1526-1

SUSE-SU-2018:1528-1

SUSE-SU-2018:1529-1

SUSE-SU-2018:1530-1

SUSE-SU-2018:1531-1

SUSE-SU-2018:1532-1

SUSE-SU-2018:1533-1

SUSE-SU-2018:1534-1

SUSE-SU-2018:1535-1

SUSE-SU-2018:1536-1

SUSE-SU-2018:1537-1

SUSE-SU-2018:1538-1

SUSE-SU-2018:1540-1

SUSE-SU-2018:1541-1

SUSE-SU-2018:1543-1

SUSE-SU-2018:1545-1

SUSE-SU-2018:1546-1

SUSE-SU-2018:1548-1

SUSE-SU-2018:1549-1

SUSE-SU-2018:1637-1

SUSE-SU-2018:1639-1

SUSE-SU-2018:1640-1

SUSE-SU-2018:1641-1

SUSE-SU-2018:1642-1

SUSE-SU-2018:1643-1

SUSE-SU-2018:1644-1

SUSE-SU-2018:1645-1

SUSE-SU-2018:1648-1

SUSE-SU-2018_0785-1

SUSE-SU-2018_0786-1

SUSE-SU-2018_0988-1

SUSE-SU-2018_0989-1

SUSE-SU-2018_0990-1

SUSE-SU-2018_0992-1

SUSE-SU-2018_0993-1

SUSE-SU-2018_0994-1

SUSE-SU-2018_0995-1

SUSE-SU-2018_0996-1

SUSE-SU-2018_0999-1

SUSE-SU-2018_1000-1

SUSE-SU-2018_1001-1

SUSE-SU-2018_1003-1

SUSE-SU-2018_1004-1

SUSE-SU-2018_1005-1

SUSE-SU-2018_1006-1

SUSE-SU-2018_1007-1

SUSE-SU-2018_1008-1

SUSE-SU-2018_1009-1

SUSE-SU-2018_1010-1

SUSE-SU-2018_1011-1

SUSE-SU-2018_1012-1

SUSE-SU-2018_1014-1

SUSE-SU-2018_1015-1

SUSE-SU-2018_1016-1

SUSE-SU-2018_1018-1

SUSE-SU-2018_1019-1

SUSE-SU-2018_1021-1

SUSE-SU-2018_1023-1

SUSE-SU-2018_1025-1

SUSE-SU-2018_1026-1

SUSE-SU-2018_1029-1

SUSE-SU-2018_1030-1

SUSE-SU-2018_1031-1

SUSE-SU-2018_1032-1

SUSE-SU-2018_1033-1

SUSE-SU-2018_1034-1

Produtos afetados

Android Kernel

Centos

Red Hat

Suse

Referências · 719

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/rds_atomic_free_op_null_pointer_deref_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/mov_ss.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5753.md · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5715.md · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5754.md · Exploit
• 🔥 https://github.com/can1357/CVE-2018-8897 · Exploit
• 🔥 https://github.com/nmulasmajic/syscall_exploit_CVE-2018-8897 · Exploit
• 🔥 https://github.com/nmulasmajic/CVE-2018-8897 · Exploit
• 🔥 https://github.com/opsxcq/exploit-cve-2017-5715 · Exploit
• 🔥 https://github.com/jiazhang0/pop-mov-ss-exploit · Exploit
• 🔥 https://github.com/EdwardOwusuAdjei/Spectre-PoC · Exploit
• https://github.com/Eugnis/spectre-attack · Nota
• https://github.com/ionescu007/SpecuCheck · Nota
• https://github.com/raphaelsc/Am-I-affected-by-Meltdown · Nota
• https://github.com/Viralmaniar/In-Spectre-Meltdown · Nota