PT-2016-1008
CVE-2015-6640
·
تاريخ النشر
2016-01-06
·
تاريخ التحديث
2016-12-07
الوصف من
CVSS 2.0
9.3
عاليةالمقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Android versions prior to 5.1.1 LMY49F
Android versions prior to 6.0 2016-01-01
Description
The issue is related to the
prctl vma anon name function in the Android kernel, which lacks a procedure to check the availability of virtual memory areas for update. This can be exploited by a remote attacker using a specially crafted application to gain privileges or cause a denial of service, potentially leading to vma list corruption.Recommendations
For Android versions prior to 5.1.1 LMY49F, update to version 5.1.1 LMY49F or later.
For Android versions prior to 6.0 2016-01-01, update to version 6.0 2016-01-01 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾