PT-2017-10648 · Google+1 · Android Kernel+1

Chenfu Bao + 2 · Published 2017-09-08 · Updated 2019-10-03 · CVE-2017-0794

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Android kernel

Description The issue is related to an elevation of privilege vulnerability in the Upstream kernel scsi driver. This affects the Android product.

Recommendations For Android kernel, apply the fix provided in Android ID A-35644812 to resolve the issue.

Fix

LPE

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2017-0794

USN-3798-1

USN-3798-2

Affected Products

Android Kernel

Ubuntu

References · 20

• https://source.android.com/security/bulletin/2017-09-01 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3798-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-0794 · Security Note
• https://usn.ubuntu.com/3798-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-7913 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-1000004 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-9518 · Vendor Advisory
• https://usn.ubuntu.com/3798-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-18216 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-8539 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-0794 · Security Note
• https://ubuntu.com/security/CVE-2018-7566 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3798-2 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3798-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-0794 · Vendor Advisory