Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-6626
HistoryDec 08, 2015 - 12:00 a.m.

CVE-2015-6626

2015-12-0800:00:00
ubuntu.com
ubuntu.com
19

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.952

Percentile

99.4%

libstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01
allows remote attackers to obtain sensitive information, and consequently
bypass an unspecified protection mechanism, via unknown vectors, as
demonstrated by obtaining Signature or SignatureOrSystem access, aka
internal bug 24310423.

Notes

Author Note
jdstrand as with previous stagefright issues, this issue affects Ubuntu’s android packages, but not in a way that is exposed to apps. See CVE-2015-1538 for details

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.952

Percentile

99.4%