PT-2017-1402 · Google+2 · Android+2

Published 2014-12-15 · Updated 2019-10-03 · CVE-2017-0523

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android (affected versions not specified)

Description The issue is related to an elevation of privilege vulnerability in the Qualcomm Wi-Fi driver, which could allow a local malicious application to execute arbitrary code within the context of the kernel. This is rated as High because it first requires compromising a privileged process. The vulnerability is also associated with insufficient access control in the Qualcomm Wi-Fi driver, potentially allowing a remote attacker to elevate privileges and execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

ALT-PU-2014-2452

ALT-PU-2015-1794

BDU:2017-00542

CVE-2017-0523

Affected Products

Alt Linux

Android

Qualcomm Wi-Fi Driver

References · 11

• https://osv.dev/vulnerability/CVE-2017-0523 · Vendor Advisory
• https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=5bb646471da76d3d5cd02cf3da7a03ce6e3cb582 · Patch
• https://source.android.com/security/bulletin/2017-03-01.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-0523 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-0523 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-00542 · Security Note
• https://cve.org/CVERecord?id=CVE-2017-0523 · Security Note
• https://ubuntu.com/security/CVE-2017-0523 · Vendor Advisory
• https://source.android.com/security/bulletin/2017-03-01 · Note
• http://securityfocus.com/bid/96735 · Note
• http://securitytracker.com/id/1037968 · Note