In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-65853588 References: Upstream kernel.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perfUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-devel | Apr 27, 2020 | Nov 6, 2018 |
| Amazon_linux | — | Upgrade kernel | Sep 19, 2019 | Aug 28, 2018 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Nov 6, 2018 |
| Debian | — | Upgrade linux | Oct 2, 2018 | Aug 28, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libs | Nov 19, 2019 | Nov 6, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernel | Dec 11, 2019 | Nov 6, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jan 4, 2019 | Aug 16, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 31, 2018 | Oct 30, 2018 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-docs-azure | Sep 17, 2018 | Aug 28, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-39-generic-lpaeUpgrade linux-image-3.13.0-162-generic-lpaeUpgrade linux-image-3.13.0-162-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.13.0-162-powerpc64-embUpgrade linux-image-awsUpgrade linux-image-4.4.0-138-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1103-snapdragonUpgrade linux-image-oemUpgrade linux-image-4.4.0-1099-raspi2Upgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-162-genericUpgrade linux-image-4.15.0-1026-oemUpgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-138-powerpc64-embUpgrade linux-image-4.15.0-39-snapdragonUpgrade linux-image-snapdragonUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-kvmUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-1070-awsUpgrade linux-image-4.15.0-1028-raspi2Upgrade linux-image-4.15.0-1031-azureUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1027-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1026-kvmUpgrade linux-image-4.15.0-39-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-1024-gcpUpgrade linux-image-3.13.0-162-powerpc-e500mcUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-138-genericUpgrade linux-image-azureUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-138-powerpc64-smpUpgrade linux-image-3.13.0-162-powerpc64-smpUpgrade linux-image-4.4.0-138-lowlatencyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-39-genericUpgrade linux-image-genericUpgrade linux-image-3.13.0-162-powerpc-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-138-powerpc-e500mcUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1032-awsUpgrade linux-image-4.4.0-1036-kvmUpgrade linux-image-4.4.0-138-powerpc-smpUpgrade linux-image-3.13.0-162-powerpc-e500Upgrade linux-image-powerpc-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-gcp | Oct 31, 2018 | Aug 28, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub