Google Android Linux Kernel 802.11 MGMT Frame memory corruption

Summaryinfo

A vulnerability was found in Google Android. It has been rated as critical. Affected by this issue is some unknown functionality of the component Linux Kernel. This manipulation as part of 802.11 MGMT Frame causes memory corruption. This vulnerability appears as CVE-2017-15822. The attacker needs to be present on the local network. There is no available exploit. It is suggested to install a patch to address this issue.

Detailsinfo

A vulnerability classified as critical was found in Google Android (Smartphone Operating System) (version unknown). Affected by this vulnerability is an unknown function of the component Linux Kernel. The manipulation as part of a 802.11 MGMT Frame leads to a memory corruption vulnerability. The CWE definition for the vulnerability is CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, while processing a 802.11 management frame, a buffer overflow may potentially occur.

The bug was discovered 04/04/2018. The weakness was presented 04/03/2018 (Website). The advisory is shared at source.android.com. This vulnerability is known as CVE-2017-15822 since 10/24/2017. The exploitation appears to be easy. The attack needs to approached within the local network. The exploitation doesn't need any form of authentication. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $5k-$25k at the moment (estimation calculated on 01/21/2020). It is expected to see the exploit prices for this product increasing in the near future.

Applying a patch is able to eliminate this problem.

See VDB-83180, VDB-115638, VDB-115639 and VDB-115645 for similar entries. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Smartphone Operating System

Vendor

• Google

Name

• Android

License

• free

Website

• Vendor: https://www.google.com/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion