Описание
The GPS component in Android before 2016-12-05 allows man-in-the-middle attackers to cause a denial of service (GPS signal-acquisition delay) via an incorrect xtra.bin or xtra2.bin file on a spoofed Qualcomm gpsonextra.net or izatcloud.net host, aka internal bug 31470303 and external bug 211602 (and AndroidID-7225554).
Ссылки
- PatchVendor Advisory
- Third Party AdvisoryVDB Entry
- MitigationThird Party Advisory
- PatchVendor Advisory
- Third Party AdvisoryVDB Entry
- MitigationThird Party Advisory
Уязвимые конфигурации
EPSS
5.9 Medium
CVSS3
7.1 High
CVSS2
Дефекты
Связанные уязвимости
The GPS component in Android before 2016-12-05 allows man-in-the-middle attackers to cause a denial of service (GPS signal-acquisition delay) via an incorrect xtra.bin or xtra2.bin file on a spoofed Qualcomm gpsonextra.net or izatcloud.net host, aka internal bug 31470303 and external bug 211602 (and AndroidID-7225554).
Уязвимость компонента GPS операционной системы Android, позволяющая нарушителю вызвать отказ в обслуживании (приостановку обнаружения сигнала GPS)
EPSS
5.9 Medium
CVSS3
7.1 High
CVSS2