In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-65853588 References: Upstream kernel.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Apr 27, 2020 | Nov 6, 2018 |
| Amazon_linux | — | Upgrade kernel | Sep 19, 2019 | Aug 28, 2018 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Nov 6, 2018 |
| Debian | — | Upgrade linux | Oct 2, 2018 | Aug 28, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64 | Nov 19, 2019 | Nov 6, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Dec 11, 2019 | Nov 6, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jan 4, 2019 | Aug 16, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 31, 2018 | Oct 30, 2018 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-docs-azureUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-default-extra | Sep 17, 2018 | Aug 28, 2018 |
| Ubuntu | — | Upgrade linux-image-3.13.0-162-powerpc64-smpUpgrade linux-image-4.15.0-39-genericUpgrade linux-image-4.4.0-138-powerpc-e500mcUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-138-powerpc-smpUpgrade linux-image-3.13.0-162-powerpc-smpUpgrade linux-image-4.4.0-138-lowlatencyUpgrade linux-image-azureUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-138-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-1032-awsUpgrade linux-image-3.13.0-162-powerpc-e500mcUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1036-kvmUpgrade linux-image-4.15.0-1024-gcpUpgrade linux-image-genericUpgrade linux-image-3.13.0-162-powerpc-e500Upgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-138-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-39-lowlatencyUpgrade linux-image-4.4.0-1103-snapdragonUpgrade linux-image-4.15.0-1026-kvmUpgrade linux-image-generic-lts-trustyUpgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-162-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1070-awsUpgrade linux-image-4.4.0-138-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-3.13.0-162-powerpc64-embUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1026-oemUpgrade linux-image-4.15.0-1028-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-138-powerpc64-embUpgrade linux-image-4.15.0-1027-awsUpgrade linux-image-4.15.0-1031-azureUpgrade linux-image-oemUpgrade linux-image-4.15.0-39-generic-lpaeUpgrade linux-image-4.15.0-39-snapdragonUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-3.13.0-162-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1099-raspi2Upgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-162-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-hwe-16.04 | Oct 31, 2018 | Aug 28, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub