Lucene search

[email protected]CVE-2020-11156

HistoryNov 02, 2020 - 7:15 a.m.

CVE-2020-11156

2020-11-0207:15:00

CWE-125

CWE-20

[email protected]

web.nvd.nist.gov

cve-2020-11156

buffer over-read

bluetooth

estack

snapdragon

security

vulnerability

nvd

8.1 High

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

8.1 High

AI Score

Confidence

High

4.8 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:N/A:P

0.001 Low

EPSS

Percentile

25.2%

JSON

u’Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap packet received from peer device.’ in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in QCA6390, QCN7605, QCS404, SA415M, SA515M, SC8180X, SDX55, SM8250

CPENameOperatorVersion
qualcomm:qca6390_firmwarequalcomm qca6390 firmwareeq-
qualcomm:qcn7605_firmwarequalcomm qcn7605 firmwareeq-
qualcomm:qcs404_firmwarequalcomm qcs404 firmwareeq-
qualcomm:sa415m_firmwarequalcomm sa415m firmwareeq-
qualcomm:sa515m_firmwarequalcomm sa515m firmwareeq-
qualcomm:sc8180x_firmwarequalcomm sc8180x firmwareeq-
qualcomm:sdx55_firmwarequalcomm sdx55 firmwareeq-
qualcomm:sm8250_firmwarequalcomm sm8250 firmwareeq-

CPE	Name	Operator	Version
qualcomm:qca6390_firmware	qualcomm qca6390 firmware	eq	-
qualcomm:qcn7605_firmware	qualcomm qcn7605 firmware	eq	-
qualcomm:qcs404_firmware	qualcomm qcs404 firmware	eq	-
qualcomm:sa415m_firmware	qualcomm sa415m firmware	eq	-
qualcomm:sa515m_firmware	qualcomm sa515m firmware	eq	-
qualcomm:sc8180x_firmware	qualcomm sc8180x firmware	eq	-
qualcomm:sdx55_firmware	qualcomm sdx55 firmware	eq	-
qualcomm:sm8250_firmware	qualcomm sm8250 firmware	eq	-

References

www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin

www.qualcomm.com/company/product-security/bulletins/october-2020-security-bulletin

8.1 High

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

8.1 High

AI Score

Confidence

High

4.8 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:N/A:P

0.001 Low

EPSS

Percentile

25.2%

JSON

Related for CVE-2020-11156

prion1