PT-2018-17227
CVE-2018-5899
·
تاريخ النشر
2018-07-06
·
تاريخ التحديث
2018-08-27
الوصف من
CVSS 2.0
4.6
متوسطةالمقاييسAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions:
Android for MSM versions prior to security patch level 2018-06-05
Firefox OS for MSM versions prior to security patch level 2018-06-05
QRD Android versions prior to security patch level 2018-06-05
Description:
The issue occurs when a TDLS connection is set up, causing a
netbuf to be freed in ol tx completion handler and then accessed in NBUF UPDATE TX PKT COUNT, resulting in a use after free.Recommendations:
For Android for MSM versions prior to security patch level 2018-06-05, update to a version with a security patch level of 2018-06-05 or later.
For Firefox OS for MSM versions prior to security patch level 2018-06-05, update to a version with a security patch level of 2018-06-05 or later.
For QRD Android versions prior to security patch level 2018-06-05, update to a version with a security patch level of 2018-06-05 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾