Google Android Qualcomm erweiterte Rechte

eintrageditHistoryDiffjsonxmlCTI

Eine Schwachstelle wurde in Google Android - eine genaue Versionsangabe steht aus - (Smartphone Operating System) ausgemacht. Sie wurde als kritisch eingestuft. Davon betroffen ist unbekannter Code der Komponente Qualcomm. Die Schwachstelle lässt sich durch das Einspielen eines Patches lösen.

Feld21.09.2017 21:4918.11.2019 15:2313.01.2021 18:22
typeSmartphone Operating SystemSmartphone Operating SystemSmartphone Operating System
vendorGoogleGoogleGoogle
nameAndroidAndroidAndroid
componentQualcommQualcommQualcomm
cwe264 (erweiterte Rechte)264 (erweiterte Rechte)264 (erweiterte Rechte)
cvss2_vuldb_basescore6.86.86.8
cvss2_vuldb_tempscore5.95.95.9
cvss2_vuldb_avNNN
cvss2_vuldb_acMMM
cvss2_vuldb_auNNN
cvss2_vuldb_ciPPP
cvss2_vuldb_iiPPP
cvss2_vuldb_aiPPP
cvss2_nvd_avNNN
cvss2_nvd_acMMM
cvss2_nvd_auNNN
cvss2_nvd_ciPPP
cvss2_nvd_iiPPP
cvss2_nvd_aiPPP
cvss3_meta_basescore7.87.87.8
cvss3_meta_tempscore7.57.57.5
cvss3_vuldb_basescore7.87.87.8
cvss3_vuldb_tempscore7.57.57.5
cvss3_vuldb_avLLL
cvss3_vuldb_acLLL
cvss3_vuldb_prNNN
cvss3_vuldb_uiRRR
cvss3_vuldb_sUUU
cvss3_vuldb_cHHH
cvss3_vuldb_iHHH
cvss3_vuldb_aHHH
cvss3_nvd_avLLL
cvss3_nvd_acLLL
cvss3_nvd_prNNN
cvss3_nvd_uiRRR
cvss3_nvd_sUUU
cvss3_nvd_cHHH
cvss3_nvd_iHHH
cvss3_nvd_aHHH
date1505952000 (21.09.2017)1505952000 (21.09.2017)1505952000 (21.09.2017)
urlhttps://source.android.com/security/bulletin/2017-09-01https://source.android.com/security/bulletin/2017-09-01https://source.android.com/security/bulletin/2017-09-01
price_0day$25k-$100k$25k-$100k$25k-$100k
price_trend+++
namePatchPatchPatch
cveCVE-2017-8247CVE-2017-8247CVE-2017-8247
cve_assigned149307840014930784001493078400
cve_nvd_published150595200015059520001505952000
cve_nvd_summaryIn all Qualcomm products with Android releases from CAF using the Linux kernel, if there is more than one thread doing the device open operation, the device may be opened more than once. This would lead to get_pid being called more than once, however put_pid being called only once in function "msm_close".In all Qualcomm products with Android releases from CAF using the Linux kernel, if there is more than one thread doing the device open operation, the device may be opened more than once. This would lead to get_pid being called more than once, however put_pid being called only once in function "msm_close".In all Qualcomm products with Android releases from CAF using the Linux kernel, if there is more than one thread doing the device open operation, the device may be opened more than once. This would lead to get_pid being called more than once, however put_pid being called only once in function "msm_close".
securityfocus100658100658100658
securityfocus_titleGoogle Android Qualcomm Components Multiple Security VulnerabilitiesGoogle Android Qualcomm Components Multiple Security VulnerabilitiesGoogle Android Qualcomm Components Multiple Security Vulnerabilities
seealso101269 101388 101623 106244 106245 106246 106247 106248 106249 106250 106251 106252 106253 106254 106255 106256 106257 106258 106259 106260 106261 106262 106263 106264 106265 106266 106267 106268 106269 106270101269 101388 101623 106244 106245 106246 106247 106248 106249 106250 106251 106252 106253 106254 106255 106256 106257 106258 106259 106260 106261 106262 106263 106264 106265 106266 106267 106268 106269 106270101269 101388 101623 106244 106245 106246 106247 106248 106249 106250 106251 106252 106253 106254 106255 106256 106257 106258 106259 106260 106261 106262 106263 106264 106265 106266 106267 106268 106269 106270
risk222
locationWebsiteWebsiteWebsite
cvss2_vuldb_eNDNDND
cvss2_vuldb_rlOFOFOF
cvss2_vuldb_rcNDNDND
cvss3_vuldb_eXXX
cvss3_vuldb_rlOOO
cvss3_vuldb_rcXXX
0day_days161616
person_nicknameAlibabaAlibabaAlibaba
cvss3_nvd_basescore7.87.87.8
discoverydate15045696001504569600
company_nameQihoo 360Qihoo 360
confirm_urlhttps://source.android.com/security/bulletin/2017-09-01https://source.android.com/security/bulletin/2017-09-01
securityfocus_date1504569600 (05.09.2017)1504569600 (05.09.2017)
securityfocus_classUnknownUnknown
person_namePengfei Ding/Chenfu Bao /Lenx Wei
cvss2_nvd_basescore6.8

◂ ZurückÜbersichtWeiter ▸

Do you know our Splunk app?

Download it now for free!