PT-2018-5583 · Google+4 · Android Kernel+4

Publicado

2018-04-04

·

Atualizado

2019-10-03

·

CVE-2017-13305

CVSS v3.1

7.1

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Android kernel
Description: A information disclosure vulnerability exists in the Upstream kernel encrypted-keys, affecting Android products.
Recommendations: For Android kernel, apply the fix provided in Android ID: A-70526974 to resolve the issue.

Correção

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CESA-2018_1062
CVE-2017-13305
DLA-1731-1
DLA-1731-2
OPENSUSE-SU-2018_1773-1
RHSA-2018:0676
RHSA-2018:1062
RHSA-2018:2165
RHSA-2018_0676
RHSA-2018_1062
SUSE-SU-2018:1761-1
SUSE-SU-2018:1762-1
SUSE-SU-2018:1816-1
SUSE-SU-2018:1855-1
SUSE-SU-2018:1855-2
SUSE-SU-2018:2332-1
SUSE-SU-2018:2366-1
SUSE-SU-2018:2637-1
SUSE-SU-2018_1761-1
SUSE-SU-2018_1762-1
SUSE-SU-2018_1855-1
SUSE-SU-2018_1855-2
USN-3631-1
USN-3631-2
USN-3655-1
USN-3655-2

Produtos afetados

Android Kernel
Centos
Red Hat
Suse
Ubuntu