PT-2017-3953 · Google+4 · Android Kernel+4

Publicado 2017-09-03 · Atualizado 2023-06-14 · CVE-2018-9517

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android kernel

Description The issue is related to a use after free in the pppol2tp connect function, which could lead to memory corruption. This might allow an attacker to escalate privileges locally with System execution privileges. No user interaction is required for exploitation.

Recommendations For Android kernel, consider applying a patch to fix the use after free issue in the pppol2tp connect function as a permanent solution. As a temporary workaround, restrict access to the pppol2tp connect function to minimize the risk of exploitation.

Exploit

Correção

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

BDU:2020-03256

CESA-2019_2029

CVE-2018-9517

OPENSUSE-SU-2021:3876-1

OPENSUSE-SU-2021_3876-1

RHSA-2019:2029

RHSA-2019:2043

RHSA-2019_2029

RHSA-2019_2043

SUSE-SU-2021:3192-1

SUSE-SU-2021:3206-1

SUSE-SU-2021:3217-1

SUSE-SU-2021:3876-1

SUSE-SU-2021:3969-1

SUSE-SU-2021:3972-1

SUSE-SU-2021_3192-1

SUSE-SU-2021_3206-1

SUSE-SU-2023:0420-1

SUSE-SU-2023:2506-1

SUSE-SU-2023_0420-1

USN-3932-1

USN-3932-2

Produtos afetados

Android Kernel

Centos

Red Hat

Suse

Ubuntu

Referências · 567

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/rds_atomic_free_op_null_pointer_deref_priv_esc.rb · Exploit
• 🔥 https://github.com/Liang2580/CVE-2021-33909 · Exploit
• 🔥 https://github.com/ChrisTheCoolHut/CVE-2021-33909 · Exploit
• 🔥 https://github.com/0xdevil/CVE-2021-42008 · Exploit
• 🔥 https://github.com/mmxsrup/CVE-2019-5489 · Exploit
• 🔥 https://github.com/bbinfosec43/CVE-2021-33909 · Exploit
• 🔥 https://github.com/baerwolf/cve-2021-33909 · Exploit
• 🔥 https://github.com/numanturle/CVE-2021-42008 · Exploit
• https://github.com/torvalds/linux/commit/cfa39381173d5f969daf43582c95ad679189cbc9 · Nota
• https://github.com/torvalds/linux/commit/b1bd5cba3306691c771d558e94baa73e8b0b96b7 · Nota
• https://github.com/google/security-research/security/advisories/GHSA-7wq5-phmq-m584 · Nota
• https://github.com/aegistudio/RingBufferDetonator · Nota
• https://suse.com/security/cve/CVE-2021-34981 · Nota
• https://usn.ubuntu.com/3932-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2021-3744.html · Nota