In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-65853588 References: Upstream kernel.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Apr 27, 2020 | Nov 6, 2018 |
| Amazon_linux | — | Upgrade kernel | Sep 19, 2019 | Aug 28, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Nov 6, 2018 |
| Debian | — | Upgrade linux | Oct 2, 2018 | Aug 28, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Nov 19, 2019 | Nov 6, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade kernelUpgrade perf | Dec 11, 2019 | Nov 6, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jan 4, 2019 | Aug 16, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 31, 2018 | Oct 30, 2018 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-docs-azureUpgrade kernel-azure-baseUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-obs-build | Sep 17, 2018 | Aug 28, 2018 |
| Ubuntu | — | Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-1032-awsUpgrade linux-image-4.4.0-138-powerpc-e500mcUpgrade linux-image-3.13.0-162-powerpc-e500Upgrade linux-image-4.4.0-138-powerpc-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-4.4.0-138-genericUpgrade linux-image-azureUpgrade linux-image-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-162-powerpc64-smpUpgrade linux-image-3.13.0-162-powerpc-e500mcUpgrade linux-image-4.4.0-138-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1024-gcpUpgrade linux-image-4.4.0-1036-kvmUpgrade linux-image-4.15.0-39-genericUpgrade linux-image-3.13.0-162-powerpc-smpUpgrade linux-image-4.4.0-138-powerpc64-smpUpgrade linux-image-4.15.0-1026-kvmUpgrade linux-image-3.13.0-162-powerpc64-embUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-oemUpgrade linux-image-3.13.0-162-generic-lpaeUpgrade linux-image-4.15.0-1027-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-138-powerpc64-embUpgrade linux-image-3.13.0-162-lowlatencyUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1028-raspi2Upgrade linux-image-4.15.0-39-generic-lpaeUpgrade linux-image-4.15.0-1031-azureUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-138-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1099-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1026-oemUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.13.0-162-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-39-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1070-awsUpgrade linux-image-4.4.0-1103-snapdragonUpgrade linux-image-4.15.0-39-snapdragon | Oct 31, 2018 | Aug 28, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub