PT-2015-3331

CVE-2015-7292

·

تاريخ النشر

2015-09-07

·

تاريخ التحديث

2017-04-15

الوصف من

CVSS 2.0
10
عالية
المقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Amazon Fire OS versions prior to 2016-01-15
Description The issue is related to a stack-based buffer overflow in the havok write function. This can be exploited by sending a long string to the /dev/hv device, potentially causing a denial of service or other unspecified impacts.
Recommendations For Amazon Fire OS versions prior to 2016-01-15, update to a version released after 2016-01-15 to resolve the issue. As a temporary workaround, consider restricting access to the /dev/hv device to minimize the risk of exploitation.
قابلية الاستغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾