PT-2018-3974 · Google+2 · Android Kernel+2

Publicado

2018-02-26

·

Atualizado

2024-03-21

·

CVE-2022-20567

CVSS v3.1

7.4

Alta

VetorAV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Android kernel versions (affected versions not specified)
Description The issue is related to a possible use after free due to a race condition in the pppol2tp create function of l2tp ppp.c. This could lead to local escalation of privilege, requiring System execution privileges for exploitation. No user interaction is needed for exploitation. The vulnerability is associated with a race condition, potentially affecting the confidentiality, integrity, and availability of protected information or allowing privilege escalation.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

BDU:2023-08895
CVE-2022-20567
SUSE-SU-2023:1801-1
SUSE-SU-2023:1803-1
SUSE-SU-2023:1848-1
SUSE-SU-2023:1894-1
SUSE-SU-2023:2232-1
USN-6700-1
USN-6700-2

Produtos afetados

Android Kernel
Suse
Ubuntu