Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3r9w-jr8m-vqjq

Опубликовано: 21 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.4

Описание

In pppol2tp_create of l2tp_ppp.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-186777253References: Upstream kernel

In pppol2tp_create of l2tp_ppp.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-186777253References: Upstream kernel

EPSS

Процентиль: 2%
0.00012
Низкий

6.4 Medium

CVSS3

Дефекты

CWE-362

Связанные уязвимости

CVSS3: 6.4
ubuntu
около 3 лет назад

In pppol2tp_create of l2tp_ppp.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-186777253References: Upstream kernel

CVSS3: 6.4
redhat
почти 8 лет назад

In pppol2tp_create of l2tp_ppp.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-186777253References: Upstream kernel

CVSS3: 6.4
nvd
около 3 лет назад

In pppol2tp_create of l2tp_ppp.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-186777253References: Upstream kernel

CVSS3: 6.4
debian
около 3 лет назад

In pppol2tp_create of l2tp_ppp.c, there is a possible use after free d ...

CVSS3: 6.4
fstec
почти 8 лет назад

Уязвимость функции pppol2tp_create() в модуле net/l2tp/l2tp_ppp.c ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации или повысить свои привилегии

EPSS

Процентиль: 2%
0.00012
Низкий

6.4 Medium

CVSS3

Дефекты

CWE-362