PT-2018-10893 · Mozilla+3 · Firefox Os+3

Publicado 2018-09-19 · Atualizado 2019-04-18 · CVE-2018-11897

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android for MSM (affected versions not specified) Firefox OS for MSM (affected versions not specified) QRD Android (affected versions not specified)

Description The issue occurs in the Linux kernel when processing a diag event after connecting to a network. If the SSID of the joined network exceeds the maximum limit, an out-of-bounds read happens.

Recommendations For Android for MSM, update the Linux kernel to a version that fixes the out-of-bounds read issue. For Firefox OS for MSM, update the Linux kernel to a version that fixes the out-of-bounds read issue. For QRD Android, update the Linux kernel to a version that fixes the out-of-bounds read issue.

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2018-11897

Produtos afetados

Android

Firefox Os

Linux Kernel

Qrd Android

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-11897 · Nota de Segurança
• https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=7500b7660997121039001f0ff91ce3b63040544b · Correção
• http://securityfocus.com/bid/107770 · Nota
• https://codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin · Correção