Lucene search
+L

3828 matches found

ATTACKERKB
ATTACKERKB
added 2019/06/19 12:0 a.m.43 views

CVE-2019-2025

In binderthreadread of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...

7.8CVSS3.3AI score0.00523EPSS
SaveExploits2References2
NVD
NVD
added 2019/06/07 8:29 p.m.23 views

CVE-2019-2101

In uvcparsestandardcontrol of uvcdriver.c, there is a possible out-of-bound read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android...

5.5CVSS5.2AI score0.004EPSS
SaveExploits0References5
OSV
OSV
added 2019/06/07 8:29 p.m.3 views

DEBIAN-CVE-2019-2101

In uvcparsestandardcontrol of uvcdriver.c, there is a possible out-of-bound read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android...

5.5CVSS7.7AI score0.004EPSS
SaveExploits0References1
OSV
OSV
added 2019/06/07 8:29 p.m.10 views

CVE-2019-2101

In uvcparsestandardcontrol of uvcdriver.c, there is a possible out-of-bound read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android...

5.5CVSS6.7AI score
SaveExploits0References5
Prion
Prion
added 2019/06/07 8:29 p.m.26 views

Design/Logic Flaw

In uvcparsestandardcontrol of uvcdriver.c, there is a possible out-of-bound read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android...

2.1CVSS5.5AI score0.004EPSS
SaveExploits0References5Affected Software2
Debian CVE
Debian CVE
added 2019/06/07 7:41 p.m.58 views

CVE-2019-2101

In uvcparsestandardcontrol of uvcdriver.c, there is a possible out-of-bound read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android...

5.5CVSS6AI score0.004EPSS
SaveExploits0
CVE
CVE
added 2019/06/07 7:41 p.m.270 views

CVE-2019-2101

CVE-2019-2101 affects the Android kernel as described in the connected advisories. The vulnerability is caused by an out-of-bounds read in the function uvc_parse_standard_control within uvc_driver.c , resulting from improper input validation. This can lead to local information disclosure without ...

5.5CVSS5.9AI score0.004EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2019/06/07 7:41 p.m.38 views

CVE-2019-2101

In uvcparsestandardcontrol of uvcdriver.c, there is a possible out-of-bound read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android...

6.1AI score0.004EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2019/06/07 12:0 a.m.30 views

CVE-2019-2101

In uvcparsestandardcontrol of uvcdriver.c, there is a possible out-of-bound read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android...

5.5CVSS7AI score0.004EPSS
SaveExploits0References4
OSV
OSV
added 2019/06/07 12:0 a.m.4 views

UBUNTU-CVE-2019-2101

In uvcparsestandardcontrol of uvcdriver.c, there is a possible out-of-bound read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android...

5.5CVSS6.9AI score0.004EPSS
SaveExploits0References5
CNVD
CNVD
added 2019/06/05 12:0 a.m.9 views

Google Android Kernel Component Information Disclosure Vulnerability (CNVD-2019-23101)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in the Google Android Kernel component UVC driver. No details of the vulnerability are provided at this time...

5.5CVSS7.7AI score0.004EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/05/31 12:0 a.m.10 views

The vulnerability of the binder_alloc_free_page function (binder_alloc.c) in the Android operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the binderallocfreepage function binderalloc.c in the Android operating system is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS7.3AI score0.00788EPSS
SaveExploits3References13Affected Software1
NVD
NVD
added 2019/05/08 5:29 p.m.26 views

CVE-2019-2054

In the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due to seccomp policies that allow the use of ptrace. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.7AI score0.00671EPSS
SaveExploits0References5
OSV
OSV
added 2019/05/08 5:29 p.m.10 views

CVE-2019-2054

In the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due to seccomp policies that allow the use of ptrace. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.5AI score
SaveExploits0References5
OSV
OSV
added 2019/05/08 5:29 p.m.7 views

DEBIAN-CVE-2019-2054

In the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due to seccomp policies that allow the use of ptrace. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS9.2AI score0.00671EPSS
SaveExploits0References1
Prion
Prion
added 2019/05/08 5:29 p.m.24 views

Design/Logic Flaw

In the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due to seccomp policies that allow the use of ptrace. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

4.6CVSS7.5AI score0.00671EPSS
SaveExploits0References5Affected Software1
UbuntuCve
UbuntuCve
added 2019/05/08 12:0 a.m.38 views

CVE-2019-2054

In the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due to seccomp policies that allow the use of ptrace. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.1AI score0.00671EPSS
SaveExploits0References6
OSV
OSV
added 2019/05/08 12:0 a.m.3 views

UBUNTU-CVE-2019-2054

In the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due to seccomp policies that allow the use of ptrace. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.2AI score0.00671EPSS
SaveExploits0References7
NVD
NVD
added 2019/02/28 5:29 p.m.21 views

CVE-2019-2000

In several functions of binder.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID:...

7.8CVSS7.9AI score0.00675EPSS
SaveExploits3References3
Prion
Prion
added 2019/02/28 5:29 p.m.14 views

Double free

In binderallocfreepage of binderalloc.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android...

7.2CVSS7.5AI score0.00788EPSS
SaveExploits3References6Affected Software2
Rows per page
Query Builder