Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-1999

Опубликовано: 28 фев. 2019
Источник: nvd
CVSS3: 7.8
CVSS2: 7.2
EPSS Низкий

Описание

In binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-120025196.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Конфигурация 3
cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*

EPSS

Процентиль: 64%
0.00466
Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-415

Связанные уязвимости

CVSS3: 7.8
ubuntu
почти 7 лет назад

In binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-120025196.

CVSS3: 7.8
debian
почти 7 лет назад

In binder_alloc_free_page of binder_alloc.c, there is a possible doubl ...

CVSS3: 7.8
github
почти 4 года назад

In binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-120025196.

CVSS3: 7.8
fstec
почти 7 лет назад

Уязвимость функции binder_alloc_free_page (binder_alloc.c) ядра операционной системы Android, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 64%
0.00466
Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-415