Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-5340

Опубликовано: 07 авг. 2016
Источник: nvd
CVSS3: 7.8
CVSS2: 7.2
EPSS Низкий

Описание

The is_ashmem_file function in drivers/staging/android/ashmem.c in a certain Qualcomm Innovation Center (QuIC) Android patch for the Linux kernel 3.x mishandles pointer validation within the KGSL Linux Graphics Module, which allows attackers to bypass intended access restrictions by using the /ashmem string as the dentry name.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
Версия до 7.0 (включая)
Конфигурация 2
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Версия от 3.0 (включая) до 3.19.8 (включая)

EPSS

Процентиль: 9%
0.00033
Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 9 лет назад

The is_ashmem_file function in drivers/staging/android/ashmem.c in a certain Qualcomm Innovation Center (QuIC) Android patch for the Linux kernel 3.x mishandles pointer validation within the KGSL Linux Graphics Module, which allows attackers to bypass intended access restrictions by using the /ashmem string as the dentry name.

CVSS3: 7.8
debian
больше 9 лет назад

The is_ashmem_file function in drivers/staging/android/ashmem.c in a c ...

CVSS3: 7.8
github
больше 3 лет назад

The is_ashmem_file function in drivers/staging/android/ashmem.c in a certain Qualcomm Innovation Center (QuIC) Android patch for the Linux kernel 3.x mishandles pointer validation within the KGSL Linux Graphics Module, which allows attackers to bypass intended access restrictions by using the /ashmem string as the dentry name.

EPSS

Процентиль: 9%
0.00033
Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-20