PT-2017-13751 · Mozilla+2 · Firefox Os+2

Published 2017-12-05 · Updated 2019-10-03 · CVE-2017-14907

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android for MSM versions (affected versions not specified) Firefox OS for MSM versions (affected versions not specified) QRD Android versions (affected versions not specified)

Description The issue reduces cryptographic strength while deriving the disk encryption key in affected Android and Firefox OS releases that utilize the Linux kernel.

Recommendations For Android for MSM, update to a version that addresses the reduction of cryptographic strength in disk encryption key derivation. For Firefox OS for MSM, update to a version that addresses the reduction of cryptographic strength in disk encryption key derivation. For QRD Android, update to a version that addresses the reduction of cryptographic strength in disk encryption key derivation.

Fix

Related Identifiers

CVE-2017-14907

Affected Products

Android

Firefox Os

Linux Kernel

References · 2

• https://source.android.com/security/bulletin/pixel/2017-12-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-14907 · Security Note