In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-65853588 References: Upstream kernel.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo | Apr 27, 2020 | Nov 6, 2018 |
| Amazon_linux | — | Upgrade kernel | Sep 19, 2019 | Aug 28, 2018 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Nov 6, 2018 |
| Debian | — | Upgrade linux | Oct 2, 2018 | Aug 28, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfo | Nov 19, 2019 | Nov 6, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-develUpgrade kernel | Dec 11, 2019 | Nov 6, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jan 4, 2019 | Aug 16, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 31, 2018 | Oct 30, 2018 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade kernel-docs-azureUpgrade kernel-source-azure | Sep 17, 2018 | Aug 28, 2018 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1028-raspi2Upgrade linux-image-4.15.0-1026-oemUpgrade linux-image-kvmUpgrade linux-image-3.13.0-162-generic-lpaeUpgrade linux-image-3.13.0-162-lowlatencyUpgrade linux-image-3.13.0-162-genericUpgrade linux-image-4.4.0-138-powerpc64-embUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-138-generic-lpaeUpgrade linux-image-4.4.0-1103-snapdragonUpgrade linux-image-4.4.0-1099-raspi2Upgrade linux-image-4.15.0-1027-awsUpgrade linux-image-3.13.0-162-powerpc64-embUpgrade linux-image-oemUpgrade linux-image-generic-lts-trustyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1031-azureUpgrade linux-image-4.4.0-1070-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-39-lowlatencyUpgrade linux-image-4.15.0-39-snapdragonUpgrade linux-image-4.15.0-39-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-e500Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.15.0-1026-kvmUpgrade linux-image-genericUpgrade linux-image-3.13.0-162-powerpc64-smpUpgrade linux-image-raspi2Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-138-powerpc-e500mcUpgrade linux-image-4.4.0-138-lowlatencyUpgrade linux-image-4.4.0-1032-awsUpgrade linux-image-4.4.0-138-powerpc64-smpUpgrade linux-image-4.15.0-1024-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-162-powerpc-smpUpgrade linux-image-azureUpgrade linux-image-4.15.0-39-genericUpgrade linux-image-4.4.0-1036-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-138-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-162-powerpc-e500Upgrade linux-image-gkeUpgrade linux-image-3.13.0-162-powerpc-e500mcUpgrade linux-image-gcpUpgrade linux-image-4.4.0-138-powerpc-smpUpgrade linux-image-powerpc64-emb | Oct 31, 2018 | Aug 28, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub