PT-2017-13751 · Mozilla+2 · Firefox Os+2

Publicado 2017-12-05 · Atualizado 2019-10-03 · CVE-2017-14907

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android for MSM versions (affected versions not specified) Firefox OS for MSM versions (affected versions not specified) QRD Android versions (affected versions not specified)

Description The issue reduces cryptographic strength while deriving the disk encryption key in affected Android and Firefox OS releases that utilize the Linux kernel.

Recommendations For Android for MSM, update to a version that addresses the reduction of cryptographic strength in disk encryption key derivation. For Firefox OS for MSM, update to a version that addresses the reduction of cryptographic strength in disk encryption key derivation. For QRD Android, update to a version that addresses the reduction of cryptographic strength in disk encryption key derivation.

Correção

Identificadores relacionados

CVE-2017-14907

Produtos afetados

Android

Firefox Os

Linux Kernel

Referências · 2

• https://source.android.com/security/bulletin/pixel/2017-12-01 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-14907 · Nota de Segurança