PT-2017-3667

CVE-2017-18144

·

تاريخ النشر

2017-12-04

·

تاريخ التحديث

2018-05-14

الوصف من

CVSS 2.0
10
عالية
المقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-04-05
Description: The issue is related to the processing of WPA supplicant command send failures in Android, where a Use After Free condition occurs due to a local pointer not being properly updated after a connection break. This can lead to exploitation by a remote attacker, potentially impacting the confidentiality, integrity, and availability of protected information.
Recommendations: For Android versions prior to security patch level 2018-04-05, update to a version with a security patch level of 2018-04-05 or later to resolve the issue.
قابلية الاستغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾