PT-2017-12951 · Google+3 · Android Kernel+3

Publicado 2016-11-03 · Atualizado 2019-10-03 · CVE-2017-13167

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Android kernel

Description The issue is related to an elevation of privilege vulnerability in the kernel sound timer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CESA-2016_2574

CVE-2017-13167

RHSA-2016:2574

RHSA-2016:2584

RHSA-2016_2574

RHSA-2016_2584

RHSA-2017:0113

SUSE-SU-2018:0011-1

SUSE-SU-2018:0031-1

SUSE-SU-2018:0040-1

SUSE-SU-2018:0115-1

SUSE-SU-2018:0180-1

Produtos afetados

Android Kernel

Centos

Red Hat

Suse

Referências · 208

• 🔥 https://github.com/xairy/kernel-exploits/tree/master/CVE-2016-2384 · Exploit
• https://github.com/mjg59/linux/commit/a4a5ed2835e8ea042868b7401dced3f517cafa76 · Nota
• https://github.com/LineageOS/android_kernel_lge_msm8974/commit/bc40d148e91f490cc7dc0fbeb670985d94867255 · Nota
• https://github.com/LineageOS/android_kernel_lge_msm8974/commit/0878ae3cc840306ac6ccd1a09076c975e5a4e096 · Nota
• https://suse.com/support/update/announcement/2018/suse-su-20180180-1 · Nota
• https://suse.com/security/cve/CVE-2017-16536 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2018:0115-1 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7914 · Nota de Segurança
• https://suse.com/security/cve/CVE-2017-16537 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2069 · Nota de Segurança
• https://lists.centos.org/pipermail/centos-cr-announce/2016-November/003609.html · Nota
• https://bugzilla.suse.com/1067816 · Nota
• https://suse.com/security/cve/CVE-2017-14106 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8844 · Nota de Segurança
• https://bugzilla.suse.com/1064803 · Nota