PT-2018-16065 · Linux+1 · Linux Kernel+1

Published 2018-07-06 · Updated 2019-10-03 · CVE-2018-3569

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android versions prior to security patch level 2018-06-05

Description A buffer over-read issue can occur during a fast initial link setup (FILS) connection. This issue affects Android releases that use the linux kernel, including Android for MSM, Firefox OS for MSM, and QRD Android.

Recommendations For Android versions prior to the security patch level 2018-06-05, update to a version that includes the security patch level 2018-06-05 or later to resolve the issue.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2018-3569

Affected Products

Android

Linux Kernel

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-3569 · Security Note
• https://codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin · Patch
• https://source.android.com/security/bulletin/2018-06-01#qualcomm-components · Vendor Advisory
• https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=fe9ea02140c4be952171251515da90bc3a1a2bc0 · Patch