PT-2017-1886
CVE-2017-0568
·
تاريخ النشر
2017-04-07
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 2.0
7.6
عاليةالمقاييسAV:N/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Android versions Kernel-3.10, Kernel-3.18
Description
The issue is related to an elevation of privilege vulnerability in the Broadcom Wi-Fi driver, which could allow a local malicious application to execute arbitrary code within the context of the kernel. This vulnerability is rated as High because it first requires compromising a privileged process. The vulnerability is associated with insufficient access control in the Wi-Fi driver, potentially allowing a remote attacker to execute arbitrary code in the kernel context using a special application.
Recommendations
For Android versions Kernel-3.10, Kernel-3.18, consider disabling the Wi-Fi driver or restricting its use until a patch is available.
As a temporary workaround, restrict access to the kernel to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾