Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-83pw-hvj9-wh3j

Опубликовано: 11 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.6

Описание

In mmc_blk_read_single of block.c, there is a possible way to read kernel heap memory due to uninitialized data. This could lead to local information disclosure if reading from an SD card that triggers errors, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-216481035References: Upstream kernel

In mmc_blk_read_single of block.c, there is a possible way to read kernel heap memory due to uninitialized data. This could lead to local information disclosure if reading from an SD card that triggers errors, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-216481035References: Upstream kernel

EPSS

Процентиль: 14%
0.00047
Низкий

4.6 Medium

CVSS3

Дефекты

CWE-908

Связанные уязвимости

CVSS3: 4.6
ubuntu
больше 3 лет назад

In mmc_blk_read_single of block.c, there is a possible way to read kernel heap memory due to uninitialized data. This could lead to local information disclosure if reading from an SD card that triggers errors, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-216481035References: Upstream kernel

CVSS3: 4.6
nvd
больше 3 лет назад

In mmc_blk_read_single of block.c, there is a possible way to read kernel heap memory due to uninitialized data. This could lead to local information disclosure if reading from an SD card that triggers errors, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-216481035References: Upstream kernel

CVSS3: 4.6
debian
больше 3 лет назад

In mmc_blk_read_single of block.c, there is a possible way to read ker ...

CVSS3: 4.6
fstec
около 4 лет назад

Уязвимость функции mmc_blk_read_single компонента block.c ядра операционной системы Linux, позволяющая нарушителю получить доступ к конфиденциальным данным

suse-cvrf
больше 3 лет назад

Security update for the Linux Kernel

EPSS

Процентиль: 14%
0.00047
Низкий

4.6 Medium

CVSS3

Дефекты

CWE-908