PT-2017-3953 · Google+4 · Android Kernel+4

Published 2017-09-03 · Updated 2023-06-14 · CVE-2018-9517

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android kernel

Description The issue is related to a use after free in the pppol2tp connect function, which could lead to memory corruption. This might allow an attacker to escalate privileges locally with System execution privileges. No user interaction is required for exploitation.

Recommendations For Android kernel, consider applying a patch to fix the use after free issue in the pppol2tp connect function as a permanent solution. As a temporary workaround, restrict access to the pppol2tp connect function to minimize the risk of exploitation.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2020-03256

CESA-2019_2029

CVE-2018-9517

OPENSUSE-SU-2021:3876-1

OPENSUSE-SU-2021_3876-1

RHSA-2019:2029

RHSA-2019:2043

RHSA-2019_2029

RHSA-2019_2043

SUSE-SU-2021:3192-1

SUSE-SU-2021:3206-1

SUSE-SU-2021:3217-1

SUSE-SU-2021:3876-1

SUSE-SU-2021:3969-1

SUSE-SU-2021:3972-1

SUSE-SU-2021_3192-1

SUSE-SU-2021_3206-1

SUSE-SU-2023:0420-1

SUSE-SU-2023:2506-1

SUSE-SU-2023_0420-1

USN-3932-1

USN-3932-2

Affected Products

Android Kernel

Centos

Red Hat

Suse

Ubuntu

References · 567

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/rds_atomic_free_op_null_pointer_deref_priv_esc.rb · Exploit
• 🔥 https://github.com/Liang2580/CVE-2021-33909 · Exploit
• 🔥 https://github.com/ChrisTheCoolHut/CVE-2021-33909 · Exploit
• 🔥 https://github.com/0xdevil/CVE-2021-42008 · Exploit
• 🔥 https://github.com/mmxsrup/CVE-2019-5489 · Exploit
• 🔥 https://github.com/bbinfosec43/CVE-2021-33909 · Exploit
• 🔥 https://github.com/baerwolf/cve-2021-33909 · Exploit
• 🔥 https://github.com/numanturle/CVE-2021-42008 · Exploit
• https://usn.ubuntu.com/3932-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:2043 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/671980 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14625 · Security Note
• https://bdu.fstec.ru/vul/2023-00945 · Security Note
• https://bdu.fstec.ru/vul/2019-01343 · Security Note
• https://bdu.fstec.ru/vul/2021-04806 · Security Note