PT-2017-5796 · Google · Android

Andres Blanco · Publicado 2017-09-25 · Atualizado 2018-10-09 · CVE-2014-0997

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Android versions prior to 5.0.1 Android versions prior to 5.0.2 Android 4.4.4 Android 4.2.2 Android 4.1.2

Description: The issue allows remote attackers to cause a denial of service, resulting in a device reboot, via a crafted 802.11 probe response frame. This is due to improper exception handling in WiFiMonitor.

Recommendations: For Android 4.4.4, update to a version newer than 5.0.1 to resolve the issue. For Android 4.2.2, update to a version newer than 5.0.1 to resolve the issue. For Android 4.1.2, update to a version newer than 5.0.1 to resolve the issue. For versions prior to 5.0.1 and 5.0.2, update to version 5.0.1 or newer to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-19

Identificadores relacionados

CVE-2014-0997

Produtos afetados

Android

Referências · 7

• 🔥 http://seclists.org/fulldisclosure/2015/Jan/104 · Exploit
• 🔥 https://exploit-db.com/exploits/35913 · Exploit
• 🔥 https://coresecurity.com/advisories/android-wifi-direct-denial-service · Exploit
• 🔥 http://packetstormsecurity.com/files/130107/Android-WiFi-Direct-Denial-Of-Service.html · Exploit
• http://securityfocus.com/archive/1/534544/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-0997 · Nota de Segurança
• http://securityfocus.com/bid/72311 · Nota