Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-39711

Опубликовано: 16 мар. 2022
Источник: nvd
CVSS3: 4.4
CVSS2: 2.1
EPSS Низкий

Описание

In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-154175781References: Upstream kernel

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

EPSS

Процентиль: 30%
0.00112
Низкий

4.4 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 4.4
ubuntu
почти 4 года назад

In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-154175781References: Upstream kernel

CVSS3: 4.4
redhat
почти 4 года назад

In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-154175781References: Upstream kernel

CVSS3: 4.4
debian
почти 4 года назад

In bpf_prog_test_run_skb of test_run.c, there is a possible out of bou ...

CVSS3: 4.4
github
почти 4 года назад

In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-154175781References: Upstream kernel

CVSS3: 4.4
fstec
почти 4 года назад

Уязвимость функции bpf_prog_test_run_skb (test_run.c) ядра операционной системы Android, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 30%
0.00112
Низкий

4.4 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-125