PT-2019-19669 · Google · Android Kernel

Beau Kujath + 2 · Published 2019-09-06 · Updated 2022-01-01 · CVE-2019-9461

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:A/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android kernel (affected versions not specified)

Description The issue concerns a possible information disclosure in the Android kernel's VPN routing. This could lead to remote information disclosure by an adjacent network attacker with no additional execution privileges needed. User interaction is not required for exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2019-9461

Affected Products

Android Kernel

References · 5

• 🔥 http://openwall.com/lists/oss-security/2019/12/05/1 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2019/12/05/2 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2019/12/08/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-9461 · Security Note
• https://source.android.com/security/bulletin/pixel/2019-09-01 · Vendor Advisory