Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pg9w-cr87-mrj9

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required. User interaction is not required for exploitation. Product: Android; Versions: Android kernel; Android ID: A-146554327.

In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required. User interaction is not required for exploitation. Product: Android; Versions: Android kernel; Android ID: A-146554327.

EPSS

Процентиль: 5%
0.00026
Низкий

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 6.7
ubuntu
больше 4 лет назад

In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required. User interaction is not required for exploitation. Product: Android; Versions: Android kernel; Android ID: A-146554327.

CVSS3: 6.7
redhat
больше 4 лет назад

In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required. User interaction is not required for exploitation. Product: Android; Versions: Android kernel; Android ID: A-146554327.

CVSS3: 6.7
nvd
больше 4 лет назад

In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required. User interaction is not required for exploitation. Product: Android; Versions: Android kernel; Android ID: A-146554327.

CVSS3: 6.7
debian
больше 4 лет назад

In tun_get_user of tun.c, there is possible memory corruption due to a ...

CVSS3: 6.7
fstec
около 5 лет назад

Уязвимость компонента Ethernet ядра операционной системы Android, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 5%
0.00026
Низкий

Дефекты

CWE-416