PT-2017-8795 · Google+1 · Android+1

Publicado 2017-09-25 · Atualizado 2017-09-28 · CVE-2016-5868

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary code via a crafted application that compromises a privileged process. This is related to the Qualcomm networking driver, specifically the drivers/net/ethernet/msm/rndis ipa.c file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2016-5868

Produtos afetados

Android

Qualcomm Networking Driver

Referências · 5

• https://source.android.com/security/bulletin/2017-05-01 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-5868 · Nota de Segurança
• https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=fbb765a3f813f5cc85ddab21487fd65f24bf6a8c · Correção
• http://securityfocus.com/bid/98197 · Nota
• https://osv.dev/vulnerability/CVE-2016-5868 · Aviso do Fabricante