Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3rm5-w47c-292r

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

In pfkey_dump of af_key.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-110373476

In pfkey_dump of af_key.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-110373476

EPSS

Процентиль: 13%
0.00042
Низкий

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 4.4
ubuntu
больше 4 лет назад

In pfkey_dump of af_key.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-110373476

CVSS3: 4.4
redhat
больше 4 лет назад

In pfkey_dump of af_key.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-110373476

CVSS3: 4.4
nvd
больше 4 лет назад

In pfkey_dump of af_key.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-110373476

CVSS3: 4.4
debian
больше 4 лет назад

In pfkey_dump of af_key.c, there is a possible out-of-bounds read due ...

CVSS3: 7.4
fstec
больше 4 лет назад

Уязвимость функции pfkey_dump (af_key.c) операционной системы Android, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 13%
0.00042
Низкий

Дефекты

CWE-125