PT-2018-17178 · Linux · Linux Kernel

Publicado 2018-06-06 · Atualizado 2019-10-03 · CVE-2018-5840

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Linux Kernel (affected versions not specified)

Description: A buffer copy issue without checking the size of the input can occur during the DRM SDE driver initialization sequence. This issue affects all Android releases from CAF, including Android for MSM, Firefox OS for MSM, and QRD Android.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Enumeração de Fraquezas

CWE-120

Identificadores relacionados

CVE-2018-5840

Produtos afetados

Linux Kernel

Referências · 3

• https://codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2 · Correção
• https://source.android.com/security/bulletin/2018-05-01 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-5840 · Nota de Segurança