PT-2017-12951 · Google+3 · Android Kernel+3

Published 2016-11-03 · Updated 2019-10-03 · CVE-2017-13167

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Android kernel

Description The issue is related to an elevation of privilege vulnerability in the kernel sound timer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CESA-2016_2574

CVE-2017-13167

RHSA-2016:2574

RHSA-2016:2584

RHSA-2016_2574

RHSA-2016_2584

RHSA-2017:0113

SUSE-SU-2018:0011-1

SUSE-SU-2018:0031-1

SUSE-SU-2018:0040-1

SUSE-SU-2018:0115-1

SUSE-SU-2018:0180-1

Affected Products

Android Kernel

Centos

Red Hat

Suse

References · 208

• 🔥 https://github.com/xairy/kernel-exploits/tree/master/CVE-2016-2384 · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2018:0115-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7914 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2069 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8844 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6480 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2018:0180-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4581 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2384 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2017-13167 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8374 · Security Note
• https://ubuntu.com/security/CVE-2017-13167 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-01939 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13167 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6327 · Security Note