PT-2018-5583 · Google+4 · Android Kernel+4

Published 2018-04-04 · Updated 2019-10-03 · CVE-2017-13305

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Android kernel

Description: A information disclosure vulnerability exists in the Upstream kernel encrypted-keys, affecting Android products.

Recommendations: For Android kernel, apply the fix provided in Android ID: A-70526974 to resolve the issue.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CESA-2018_1062

CVE-2017-13305

DLA-1731-1

DLA-1731-2

OPENSUSE-SU-2018_1773-1

RHSA-2018:0676

RHSA-2018:1062

RHSA-2018:2165

RHSA-2018_0676

RHSA-2018_1062

SUSE-SU-2018:1761-1

SUSE-SU-2018:1762-1

SUSE-SU-2018:1816-1

SUSE-SU-2018:1855-1

SUSE-SU-2018:1855-2

SUSE-SU-2018:2332-1

SUSE-SU-2018:2366-1

SUSE-SU-2018:2637-1

SUSE-SU-2018_1761-1

SUSE-SU-2018_1762-1

SUSE-SU-2018_1855-1

SUSE-SU-2018_1855-2

USN-3631-1

USN-3631-2

USN-3655-1

USN-3655-2

Affected Products

Android Kernel

Centos

Red Hat

Suse

Ubuntu

References · 234

• https://ubuntu.com/security/notices/USN-3655-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-17449 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:2637-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-13305 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-18204 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-7566 · Vendor Advisory
• https://usn.ubuntu.com/3631-2 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:1855-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3631-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-13305 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-13220 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3631-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-18079 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-8822 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3631-1 · Vendor Advisory