Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rp85-q33q-7f7m

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

In memzero_explicit of compiler-clang.h, there is a possible bypass of defense in depth due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-171418586References: Upstream kernel

In memzero_explicit of compiler-clang.h, there is a possible bypass of defense in depth due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-171418586References: Upstream kernel

EPSS

Процентиль: 13%
0.00043
Низкий

Дефекты

CWE-908

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 4 лет назад

In memzero_explicit of compiler-clang.h, there is a possible bypass of defense in depth due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-171418586References: Upstream kernel

CVSS3: 5.5
redhat
около 5 лет назад

In memzero_explicit of compiler-clang.h, there is a possible bypass of defense in depth due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-171418586References: Upstream kernel

CVSS3: 5.5
nvd
больше 4 лет назад

In memzero_explicit of compiler-clang.h, there is a possible bypass of defense in depth due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-171418586References: Upstream kernel

CVSS3: 5.5
debian
больше 4 лет назад

In memzero_explicit of compiler-clang.h, there is a possible bypass of ...

CVSS3: 5.5
fstec
около 5 лет назад

Уязвимость компонента compiler-clang.h ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 13%
0.00043
Низкий

Дефекты

CWE-908