CVE-2016-9278

Опубликовано: 18 янв. 2017

Источник: nvd

CVSS3: 5.5

CVSS2: 4.9

EPSS Низкий

Описание

The Samsung Exynos fimg2d driver for Android with Exynos 5433, 54xx, or 7420 chipsets allows local users to cause a denial of service (kernel panic) via a crafted ioctl command. The Samsung ID is SVE-2016-6736.

Ссылки

http://security.samsungmobile.com/smrupdate.html#SMR-NOV-2016
Vendor Advisory
http://www.openwall.com/lists/oss-security/2016/11/09/3
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/11/11/11
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/94283
Third Party Advisory
VDB Entry
http://security.samsungmobile.com/smrupdate.html#SMR-NOV-2016
Vendor Advisory
http://www.openwall.com/lists/oss-security/2016/11/09/3
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/11/11/11
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/94283
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:samsung:exynos_fimg2d_driver:-:*:*:*:*:*:*:*

EPSS

Процентиль: 19%

0.00059

Низкий

5.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2016-9278

CVSS3: 6.5

redhat

около 9 лет назад

GHSA-73xv-prv9-8763