CVE-2018-11897 in Android

Riassunto

di MITRE

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing diag event after associating to a network out of bounds read occurs if ssid of the network joined is greater than max limit.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 07/06/2018
• Divulgazione: 19/09/2018
• Moderazione: accettato
• Voce: VDB-124251
• CPE: pronto
• CWE: CWE-125 (confermato)
• CVSS: 7.8 (NVD)
• EPSS: 0.00202
• KEV: no
• Attività: molto basso
• Settore: Finance, Homeoffice, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-11897
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-11897
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-11897/