In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-65853588 References: Upstream kernel.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade perf-debuginfo | Apr 27, 2020 | Nov 6, 2018 |
| Amazon_linux | — | Upgrade kernel | Sep 19, 2019 | Aug 28, 2018 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Nov 6, 2018 |
| Debian | — | Upgrade linux | Oct 2, 2018 | Aug 28, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-headers | Nov 19, 2019 | Nov 6, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade python-perf | Dec 11, 2019 | Nov 6, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jan 4, 2019 | Aug 16, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 31, 2018 | Oct 30, 2018 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-docs-azureUpgrade kernel-source-azureUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-default-man | Sep 17, 2018 | Aug 28, 2018 |
| Ubuntu | — | Upgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-138-powerpc-e500mcUpgrade linux-image-4.4.0-138-powerpc-smpUpgrade linux-image-4.4.0-1036-kvmUpgrade linux-image-3.13.0-162-powerpc-smpUpgrade linux-image-4.15.0-39-genericUpgrade linux-image-azureUpgrade linux-image-3.13.0-162-powerpc64-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-3.13.0-162-powerpc-e500Upgrade linux-image-4.4.0-1032-awsUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-138-powerpc64-smpUpgrade linux-image-gkeUpgrade linux-image-3.13.0-162-powerpc-e500mcUpgrade linux-image-4.4.0-138-genericUpgrade linux-image-genericUpgrade linux-image-4.4.0-138-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1024-gcpUpgrade linux-image-4.15.0-39-generic-lpaeUpgrade linux-image-4.15.0-1028-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-3.13.0-162-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.15.0-1031-azureUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.15.0-1026-oemUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-138-powerpc64-embUpgrade linux-image-kvmUpgrade linux-image-4.4.0-138-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-39-snapdragonUpgrade linux-image-3.13.0-162-powerpc64-embUpgrade linux-image-4.4.0-1099-raspi2Upgrade linux-image-3.13.0-162-generic-lpaeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-awsUpgrade linux-image-3.13.0-162-lowlatencyUpgrade linux-image-4.4.0-1103-snapdragonUpgrade linux-image-4.15.0-1027-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-powerpc-e500Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-39-lowlatencyUpgrade linux-image-4.4.0-1070-awsUpgrade linux-image-4.15.0-1026-kvmUpgrade linux-image-snapdragon | Oct 31, 2018 | Aug 28, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub