PT-2017-1203

CVE-2016-8402

·

Publicado

2017-01-12

·

Atualizado

2017-01-18

Descrição por

CVSS 3.1
4.7
Média
MétricasAV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10 through Kernel-3.18
Description The issue is related to a lack of protection for service data in the Android operating system kernel, specifically in the ION subsystem, Binder, USB driver, and networking subsystem. This could allow a remote attacker to cause a denial of service or have other impacts on the system. It may also enable a local malicious application to access data outside of its permission levels, although this first requires compromising a privileged process.
Recommendations For Android versions Kernel-3.10 through Kernel-3.18, update to a version that includes the necessary security patches to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾