Lucene search
+L

71 matches found

CNVD
CNVD
added 2017/03/16 12:0 a.m.6 views

Google Android kernel ION subsystem boost vulnerability

Android on Nexus 5X is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for the Nexus 5X smart device. kernel ION is a kernel memory management subsystem. The kernel ION subsystem in Android is vulnerable to a privilege extraction vulnerability. Th...

9.3CVSS7.5AI score0.01823EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2017/03/16 12:0 a.m.6 views

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the ION subsystem in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code within the kernel context, through a local malicious application...

9.3CVSS7.6AI score0.01823EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2017/03/08 1:59 a.m.3 views

CVE-2017-0508

An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing th...

7.8CVSS7.6AI score0.01823EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2017/03/08 1:59 a.m.32 views

CVE-2017-0508

An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing th...

9.3CVSS7.4AI score0.01823EPSS
Exploits0References2
Prion
Prion
added 2017/03/08 1:59 a.m.18 views

Privilege escalation

An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing th...

9.3CVSS7.3AI score0.01823EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2017/03/08 1:59 a.m.6 views

UBUNTU-CVE-2017-0508

An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing th...

7.8CVSS7.5AI score0.01823EPSS
Exploits0References3
OSV
OSV
added 2017/03/08 1:59 a.m.5 views

UBUNTU-CVE-2017-0507

An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing th...

7.8CVSS7.5AI score0.01823EPSS
Exploits0References3
CVE
CVE
added 2017/03/08 1:0 a.m.56 views

CVE-2017-0508

CVE-2017-0508 is an elevation-of-privilege flaw in the Android kernel’s ION subsystem (kernel version 3.18) that could allow a local malicious app to run arbitrary code in kernel context, potentially leading to permanent device compromise. The primary affected component is the kernel ION memory m...

9.3CVSS7.2AI score0.01823EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2017/03/08 1:0 a.m.33 views

CVE-2017-0508

An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing th...

7.2AI score0.01823EPSS
Exploits0References3
android
android
added 2017/03/01 12:0 a.m.28 views

CVE-2017-0507

An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing th...

9.3CVSS9.3AI score0.01823EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2017/02/17 12:0 a.m.8 views

The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.

The vulnerability of the ION subsystem, Binder, USB drivers, and the network subsystem of the Android operating system is related to the lack of protection for sensitive data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...

4.3CVSS5.9AI score0.01046EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2017/02/17 12:0 a.m.5 views

The vulnerability of the Android operating system, which allows a hacker to gain access to data

Vulnerabilities of kernel components, including the ION subsystem, Binder, USB driver, and the network subsystem of the Android operating system, are related to the lack of protection for sensitive data. Exploiting these vulnerabilities can allow a malicious actor to gain access to local maliciou...

4.7CVSS6.5AI score0.01551EPSS
Exploits0References16Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/02/17 12:0 a.m.9 views

The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.

The vulnerability of the ION subsystem, Binder, USB drivers, and the network subsystem of the Android operating system is related to the lack of protection for sensitive data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...

4.3CVSS5.9AI score0.01046EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2017/02/17 12:0 a.m.8 views

The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.

The vulnerability of the ION subsystem, Binder, USB drivers, and the network subsystem of the Android operating system is related to the lack of protection for sensitive data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...

4.3CVSS5.9AI score0.01046EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2017/02/17 12:0 a.m.8 views

The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.

The vulnerability of the ION subsystem, Binder, USB drivers, and the network subsystem of the Android operating system is related to the lack of protection for sensitive data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...

4.3CVSS5.9AI score0.01046EPSS
Exploits0References3
NVD
NVD
added 2017/01/12 3:59 p.m.19 views

CVE-2016-8403

An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising ...

4.7CVSS3.7AI score0.01046EPSS
Exploits0References2
OSV
OSV
added 2017/01/12 3:59 p.m.5 views

CVE-2016-8404

An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising ...

4.7CVSS7.3AI score0.01046EPSS
Exploits0References2
NVD
NVD
added 2017/01/12 3:59 p.m.26 views

CVE-2016-8406

An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising ...

4.7CVSS3.7AI score0.01046EPSS
Exploits0References2
OSV
OSV
added 2017/01/12 3:59 p.m.4 views

CVE-2016-8407

An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising ...

4.7CVSS7.3AI score0.01046EPSS
Exploits0References2
OSV
OSV
added 2017/01/12 3:59 p.m.3 views

CVE-2016-8406

An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising ...

4.7CVSS7.3AI score0.01046EPSS
Exploits0References2
Rows per page
Query Builder