Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-6614
HistoryNov 03, 2015 - 12:00 a.m.

CVE-2015-6614

2015-11-0300:00:00
ubuntu.com
ubuntu.com
12

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

EPSS

0.001

Percentile

23.5%

Telephony in Android 5.x before 5.1.1 LMY48X allows attackers to gain
privileges, and consequently bypass intended network-interface
restrictions, perform expensive data transfers, or cause a denial of
service (call-reception outage or mute manipulation), via a crafted
application, aka internal bug 21900139.

Notes

Author Note
jdstrand Ubuntu does not use the Android Telephony stack and implements its own access controls for rild

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

EPSS

0.001

Percentile

23.5%