Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
symantecSymantec Security ResponseSMNTC-110334
HistoryOct 02, 2019 - 12:00 a.m.

Google Android Binder CVE-2019-2215 Local Privilege Escalation Vulnerability

2019-10-0200:00:00
Symantec Security Response
www.symantec.com
151
JSON

Description

Google Android is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to gain elevated privileges.

Technologies Affected

  • Google Android 10.0
  • Google Android 9.0
  • Google Pixel 2

Recommendations

Permit local access for trusted individuals only. Where possible, use restricted environments and restricted shells.
Given the nature of this issue, allow only trusted and accountable users to have local, interactive access to vulnerable devices.

Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Related

thn 6
zdt 2
exploitpack 1
githubexploit 10
packetstorm 2
prion 1
attackerkb 1
huawei 1
checkpoint_advisories 1
threatpost 6
metasploit 1
cve 1
debiancve 1
redhatcve 1
ubuntucve 2
googleprojectzero 5
exploitdb 2
cisa_kev 3
trendmicroblog 1
qualysblog 1
fireeye 1
androidsecurity 1
impervablog 1
github 1
openvas 7
nessus 7
ubuntu 2
slackware 1
debian 2
osv 2
thn
thn
Researchers Uncover SideWinder's Latest Server-Based Polymorphism Technique
2023-05-09 09:39:00
New 0-Day Flaw Affecting Most Android Phones Being Exploited in the Wild
2019-10-04 09:03:00
SideWinder Hackers Use Fake Android VPN Apps to Target Pakistani Entities
2022-06-02 09:09:00
zdt
zdt
Android Binder - Use-After-Free Exploit
2020-02-24 00:00:00
Android - Binder Driver Use-After-Free Exploit
2019-10-04 00:00:00
exploitpack
exploitpack
Android - Binder Driver Use-After-Free
2019-10-04 00:00:00
githubexploit
githubexploit
Exploit for Use After Free in Google Android
2019-10-04 06:32:08
Exploit for Use After Free in Google Android
2021-05-07 16:48:40
Exploit for Use After Free in Google Android
2020-01-30 06:06:32
packetstorm
packetstorm
Android Binder Use-After-Free
2019-10-18 00:00:00
Android Binder Use-After-Free
2020-02-24 00:00:00
prion
prion
Design/Logic Flaw
2019-10-11 19:15:00
attackerkb
attackerkb
CVE-2019-2215
2019-10-11 00:00:00
huawei
huawei
Security Advisory - Use-after-free Vulnerability in Android Kernel
2019-10-30 00:00:00
checkpoint_advisories
checkpoint_advisories
Android Binder Use After Free (CVE-2019-2215)
2020-01-15 00:00:00
threatpost
threatpost
Google Warns of Android Zero-Day Bug Under Active Attack
2019-10-04 16:20:54
SideWinder APT Targets Nepal, Afghanistan in Wide-Ranging Spy Campaign
2020-12-09 19:53:13
A Brisk Private Trade in Zero-Days Widens Their Use
2020-04-06 21:05:06
metasploit
metasploit
Android Binder Use-After-Free Exploit
2019-10-17 10:48:49
cve
cve
CVE-2019-2215
2019-10-11 19:15:00
debiancve
debiancve
CVE-2019-2215
2019-10-11 19:15:00
redhatcve
redhatcve
CVE-2019-2215
2020-02-21 15:44:29
ubuntucve
ubuntucve
CVE-2019-2215
2019-10-11 00:00:00
CVE-2020-0030
2020-02-13 00:00:00
googleprojectzero
googleprojectzero
Bad Binder: Android In-The-Wild Exploit
2019-11-21 00:00:00
A Very Powerful Clipboard: Analysis of a Samsung in-the-wild exploit chain
2022-11-04 00:00:00
Root Cause Analyses for 0-day In-the-Wild Exploits
2020-07-29 00:00:00
exploitdb
exploitdb
Android Binder - Use-After-Free (Metasploit)
2020-02-24 00:00:00
Android - Binder Driver Use-After-Free
2019-10-04 00:00:00
cisa_kev
cisa_kev
Android Kernel Use-After-Free Vulnerability
2021-11-03 00:00:00
Android Kernel Out-of-Bounds Write Vulnerability
2021-11-03 00:00:00
Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability
2021-11-03 00:00:00
trendmicroblog
trendmicroblog
This Week in Security News: INTERPOL Collaboration Reduces Cryptojacking by 78% and Three Malicious Apps Found on Google Play May be Linked to SideWinder APT Group
2020-01-10 13:37:59
qualysblog
qualysblog
Expand Your Vulnerability & Patch Management Program to Mobile Devices with Qualys VMDR
2021-02-10 21:17:00
fireeye
fireeye
Zero-Day Exploitation Increasingly Demonstrates Access to Money, Rather than Skill — Intelligence for Vulnerability Management, Part One
2020-04-06 00:00:00
androidsecurity
androidsecurity
Pixel Update Bulletin—October 2019
2019-10-07 00:00:00
impervablog
impervablog
The State of Vulnerabilities in 2019
2020-01-23 08:56:58
github
github
Pwning the all Google phone with a non-Google bug
2023-01-23 15:05:19
openvas
openvas
Ubuntu Update for linux USN-4186-3
2019-11-14 00:00:00
Ubuntu Update for linux USN-4186-1
2019-11-13 00:00:00
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-2693)
2020-01-23 00:00:00
nessus
nessus
Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-4186-1)
2019-11-13 00:00:00
Slackware 14.2 : Slackware 14.2 kernel (SSA:2019-311-01)
2019-11-08 00:00:00
EulerOS 2.0 SP5 : kernel (EulerOS-SA-2019-2693)
2019-12-23 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2019-11-13 00:00:00
Linux kernel vulnerability
2019-11-13 00:00:00
slackware
slackware
[slackware-security] Slackware 14.2 kernel
2019-11-07 22:31:40
debian
debian
[SECURITY] [DLA 2068-1] linux security update
2020-01-18 04:38:12
[SECURITY] [DLA 2114-1] linux-4.9 security update
2020-03-02 18:14:56
osv
osv
linux - security update
2020-01-17 00:00:00
linux-4.9 - security update
2020-02-21 00:00:00
JSON
Related for SMNTC-110334
thn6zdt2exploitpack1githubexploit10packetstorm2prion1attackerkb1huawei1checkpoint_advisories1threatpost6metasploit1cve1debiancve1redhatcve1ubuntucve2googleprojectzero5exploitdb2cisa_kev3trendmicroblog1qualysblog1fireeye1androidsecurity1impervablog1github1openvas7nessus7ubuntu2slackware1debian2osv2