Lucene search

[email protected]CVE-2016-3760

HistoryJul 11, 2016 - 2:00 a.m.

CVE-2016-3760

2016-07-1102:00:00

CWE-20

CWE-362

[email protected]

web.nvd.nist.gov

cve

android

bluetooth

security vulnerability

privilege escalation

nvd

5.4 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:P/I:P/A:P

7.5 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.4%

JSON

Bluetooth in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows local users to gain privileges by establishing a pairing that remains present during a session of the primary user, aka internal bug 27410683.

Affected configurations

NVD

Node

googleandroidMatch5.0

googleandroidMatch5.0.1

googleandroidMatch5.1

googleandroidMatch5.1.0

googleandroidMatch6.0

googleandroidMatch6.0.1

CPENameOperatorVersion
google:androidgoogle androideq5.0
google:androidgoogle androideq5.0.1
google:androidgoogle androideq5.1
google:androidgoogle androideq5.1.0
google:androidgoogle androideq6.0
google:androidgoogle androideq6.0.1

CPE	Name	Operator	Version
google:android	google android	eq	5.0
google:android	google android	eq	5.0.1
google:android	google android	eq	5.1
google:android	google android	eq	5.1.0
google:android	google android	eq	6.0
google:android	google android	eq	6.0.1

References

source.android.com/security/bulletin/2016-07-01.html

android.googlesource.com/platform/hardware/libhardware/+/8b3d5a64c3c8d010ad4517f652731f09107ae9c5

android.googlesource.com/platform/packages/apps/Bluetooth/+/122feb9a0b04290f55183ff2f0384c6c53756bd8

android.googlesource.com/platform/system/bt/+/37c88107679d36c419572732b4af6e18bb2f7dce

5.4 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:P/I:P/A:P

7.5 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.4%

JSON

Related for CVE-2016-3760

prion1 cvelist1 ubuntucve1 nvd1 androidsecurity1