PT-2018-16081 · Linux+1 · Linux Kernel+1

Publicado 2018-07-06 · Atualizado 2018-08-28 · CVE-2018-3597

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) versions prior to security patch level 2018-06-05

Description The issue allows for an arbitrary kernel write to occur in the ADSP RPC driver.

Recommendations For Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) versions prior to security patch level 2018-06-05, update to a version with a security patch level of 2018-06-05 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2018-3597

Produtos afetados

Android

Linux Kernel

Referências · 3

• https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components · Aviso do Fabricante
• https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=e569b915a246627d0449016408a9c0d388ee4ab4 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2018-3597 · Nota de Segurança