Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-6613
HistoryNov 03, 2015 - 12:00 a.m.

CVE-2015-6613

2015-11-0300:00:00
ubuntu.com
ubuntu.com
12

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

EPSS

0.001

Percentile

28.4%

Bluetooth in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows
attackers to send commands to a debugging port, and consequently gain
privileges, via a crafted application, as demonstrated by obtaining
Signature or SignatureOrSystem access, aka internal bug 24371736.

Notes

Author Note
jdstrand Ubuntu does not use the Android bluetooth stack

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

EPSS

0.001

Percentile

28.4%