In uvc_parse_standard_control of uvc_driver.c, there is a possible out-of-bound read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-111760968.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 24, 2019 | Jun 7, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade perfUpgrade python-perf | Dec 4, 2019 | Jun 7, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-tools | Nov 19, 2019 | Jun 7, 2019 |
| Ubuntu | — | Upgrade linux-image-gke-4.15Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-oracleUpgrade linux-image-genericUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-oemUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-gkeUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-gcpUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-snapdragon | Aug 14, 2019 | Jun 7, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub