Summaryinfo

A vulnerability was found in Google Android. It has been declared as critical. Affected is the function pppol2tp_connect. Such manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2018-9517. Local access is required to approach this attack. No exploit exists. It is best practice to apply a patch to resolve this issue.

Detailsinfo

A vulnerability was found in Google Android (Smartphone Operating System) (version now known) and classified as critical. Affected by this issue is the function pppol2tp_connect. The manipulation with an unknown input leads to a use after free vulnerability. Using CWE to declare the problem leads to CWE-416. Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code. Impacted is confidentiality, integrity, and availability. CVE summarizes:

In pppol2tp_connect, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-38159931.

The bug was discovered 09/04/2018. The weakness was disclosed 12/07/2018 by Felix Wilhelm (Website). The advisory is available at source.android.com. This vulnerability is handled as CVE-2018-9517 since 04/05/2018. Local access is required to approach this attack. Required for exploitation is a simple authentication. Technical details are known, but there is no available exploit.

The vulnerability was handled as a non-public zero-day exploit for at least 94 days. During that time the estimated underground price was around $5k-$25k. The commercial vulnerability scanner Qualys is able to test this issue with plugin 197415 (Ubuntu Security Notification for Linux, Linux-aws, Linux-kvm, Linux-raspi2, Linux-snapdragon Vulnerabilities (USN-3932-1)).

Applying a patch is able to eliminate this problem.

The vulnerability is also documented in the vulnerability database at SecurityFocus (BID 106963†). The entries VDB-120204, VDB-122248, VDB-122250 and VDB-126519 are pretty similar. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Smartphone Operating System

Vendor

• Google

Name

• Android

License

• free

Website

• Vendor: https://www.google.com/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion