In nfc_llcp_build_sdreq_tlv of llcp_commands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-73083945.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-debug-develUpgrade python-perfUpgrade kernel-debugUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64 | Dec 4, 2019 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perf | Nov 19, 2019 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernel-tools | Jun 3, 2020 | Dec 7, 2018 |
| Ubuntu | — | Upgrade linux-image-3.13.0-161-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc-e500Upgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-161-powerpc-smpUpgrade linux-image-3.13.0-161-powerpc64-embUpgrade linux-image-generic-lpaeUpgrade linux-image-highbankUpgrade linux-image-3.13.0-161-genericUpgrade linux-image-3.13.0-161-powerpc64-smpUpgrade linux-image-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-161-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-161-powerpc-e500mcUpgrade linux-image-3.13.0-161-powerpc-e500 | Oct 30, 2018 | Oct 23, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub