In nfc_llcp_build_sdreq_tlv of llcp_commands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-73083945.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debugUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debug-develUpgrade perf | Dec 4, 2019 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfoUpgrade perf | Nov 19, 2019 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernelUpgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perf | Jun 3, 2020 | Dec 7, 2018 |
| Ubuntu | — | Upgrade linux-image-3.13.0-161-lowlatencyUpgrade linux-image-genericUpgrade linux-image-3.13.0-161-powerpc-e500mcUpgrade linux-image-3.13.0-161-powerpc-e500Upgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-lts-trustyUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-161-powerpc64-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-highbankUpgrade linux-image-3.13.0-161-powerpc64-embUpgrade linux-image-3.13.0-161-powerpc-smpUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500Upgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-161-generic-lpaeUpgrade linux-image-3.13.0-161-generic | Oct 30, 2018 | Oct 23, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub