In nfc_llcp_build_sdreq_tlv of llcp_commands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-73083945.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-headers | Dec 4, 2019 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel | Nov 19, 2019 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-libs | Jun 3, 2020 | Dec 7, 2018 |
| Ubuntu | — | Upgrade linux-image-3.13.0-161-powerpc64-embUpgrade linux-image-3.13.0-161-powerpc-smpUpgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-161-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-highbankUpgrade linux-image-3.13.0-161-powerpc64-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-161-generic-lpaeUpgrade linux-image-3.13.0-161-powerpc-e500Upgrade linux-image-3.13.0-161-powerpc-e500mcUpgrade linux-image-3.13.0-161-lowlatencyUpgrade linux-image-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lts-trustyUpgrade linux-image-powerpc64-embUpgrade linux-image-lowlatency | Oct 30, 2018 | Oct 23, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub