PT-2016-3133 · Google · Android

Abdsec · Published 2016-02-07 · Updated 2019-03-08 · CVE-2016-0801

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Android versions prior to 4.4.4 Android versions 5.x prior to 5.1.1 LMY49G Android versions 6.x prior to 2016-02-01

Description The issue is related to the Broadcom Wi-Fi driver in the kernel, which allows remote attackers to execute arbitrary code or cause a denial of service due to insufficient input validation. This can be achieved through crafted wireless control message packets, resulting in memory corruption.

Recommendations For Android versions prior to 4.4.4, update to version 4.4.4 or later. For Android versions 5.x prior to 5.1.1 LMY49G, update to version 5.1.1 LMY49G or later. For Android versions 6.x prior to 2016-02-01, update to a version released after 2016-02-01.

Exploit

Fix

RCE

DoS

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2017-2440

ALT-PU-2017-2441

ALT-PU-2018-2871

ALT-PU-2018-2919

BDU:2017-01325

CESA-2017_2907

CESA-2017_2911

CVE-2016-0801

DLA-1573-1

MGASA-2017-0472

RHSA-2017_2907

RHSA-2017_2911

Affected Products

Android

References · 26

• 🔥 https://github.com/abdsec/CVE-2016-0801 · Exploit
• 🔥 https://exploit-db.com/exploits/39801 · Exploit
• http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html · Vendor Advisory
• https://osv.dev/vulnerability/DLA-1573-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-0801 · Vendor Advisory
• http://source.android.com/security/bulletin/2016-02-01.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-0801 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-01325 · Security Note
• http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html · Vendor Advisory
• https://advisories.mageia.org/MGASA-2017-0472.html · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-0801 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-0801 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-0801 · Security Note