CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
EPSS
Percentile
23.5%
Telephony in Android 5.x before 5.1.1 LMY48X allows attackers to gain
privileges, and consequently bypass intended network-interface
restrictions, perform expensive data transfers, or cause a denial of
service (call-reception outage or mute manipulation), via a crafted
application, aka internal bug 21900139.
Author | Note |
---|---|
jdstrand | Ubuntu does not use the Android Telephony stack and implements its own access controls for rild |