CVE-2017-6899

Опубликовано: 16 июн. 2017

Источник: nvd

CVSS3: 6.2

CVSS2: 4.9

EPSS Низкий

Описание

The msm_bus_dbg_update_request_write function in drivers/platform/msm/msm_bus/msm_bus_dbg.c in android_kernel_huawei_msm8916 through 2017-06-16 in LineageOS, and possibly other kernels for MSM devices, allows attackers to cause a denial of service (NULL pointer dereference and device crash) via a crafted /sys/kernel/debug/msm-bus-dbg/client-data/update-request write request.

Ссылки

http://blog.secret-team.cn/index.php/archives/5/
Third Party Advisory
http://www.securityfocus.com/bid/99107
Third Party Advisory
VDB Entry
http://blog.secret-team.cn/index.php/archives/5/
Third Party Advisory
http://www.securityfocus.com/bid/99107
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:lineageos:lineageos:*:*:*:*:*:*:*:*

Версия до 2017-06-16 (включая)

EPSS

Процентиль: 21%

0.00069

Низкий

6.2 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

GHSA-gf68-qxhp-mhcf

CVSS3: 6.2

github

больше 3 лет назад

SUSE-SU-2017:2300-1

suse-cvrf

больше 8 лет назад

Security update for libraw