PT-2017-1879
CVE-2017-0575
·
تاريخ النشر
2017-04-07
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 2.0
7.6
عاليةالمقاييسAV:N/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Android versions Kernel-3.10, Kernel-3.18
Description
The issue is related to an elevation of privilege vulnerability in the Qualcomm Wi-Fi driver, which could allow a local malicious application to execute arbitrary code within the context of the kernel. This is rated as High because it first requires compromising a privileged process. The vulnerability is associated with insufficient access control in the Wi-Fi driver, potentially allowing a remote attacker to execute arbitrary code in the kernel context using a special application.
Recommendations
For Android versions Kernel-3.10, Kernel-3.18, consider restricting access to the Qualcomm Wi-Fi driver as a temporary workaround until a patch is available.
As a mitigation measure, ensure that all privileged processes are properly secured to prevent initial compromise.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾