PT-2018-5319 · Qualcomm+1 · Qualcomm Snapdragon+1

Publicado 2018-07-06 · Atualizado 2018-09-04 · CVE-2017-11088

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 835, SD 845

Description A SQL injection issue exists due to improper input validation in the Linux io-prefetch component. This could potentially allow for unauthorized access or control.

Recommendations For versions MSM8909W, apply the necessary security patches to fix the SQL injection vulnerability. For versions MSM8996AU, update the io-prefetch component to prevent improper input validation. For versions SD 210/SD 212/SD 205, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 835, SD 845, restrict access to sensitive data to minimize the risk of exploitation until a patch is available.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2017-11088

Produtos afetados

Linux

Qualcomm Snapdragon

Referências · 2

• https://qualcomm.com/company/product-security/bulletins · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-11088 · Nota de Segurança