CVE-2018-9518

2018-09-1000:00:00

ubuntu.com

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

In nfc_llcp_build_sdreq_tlv of llcp_commands.c, there is a possible out of
bounds write due to a missing bounds check. This could lead to local
escalation of privilege with System execution privileges needed. User
interaction is not needed for exploitation. Product: Android. Versions:
Android kernel. Android ID: A-73083945.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-34.37UNKNOWN
ubuntu14.04noarchlinux< 3.13.0-161.211UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-130.156UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1021.21UNKNOWN
ubuntu14.04noarchlinux-aws< 4.4.0-1024.25UNKNOWN
ubuntu16.04noarchlinux-aws< 4.4.0-1062.71UNKNOWN
ubuntu18.04noarchlinux-azure< 4.15.0-1023.24UNKNOWN
ubuntu16.04noarchlinux-azure< 4.15.0-1023.24~16.04.1UNKNOWN
ubuntu16.04noarchlinux-azure-edge< 4.15.0-1023.24UNKNOWN
ubuntu18.04noarchlinux-gcp< 4.15.0-1019.20UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	linux	< 4.15.0-34.37	UNKNOWN
ubuntu	14.04	noarch	linux	< 3.13.0-161.211	UNKNOWN
ubuntu	16.04	noarch	linux	< 4.4.0-130.156	UNKNOWN
ubuntu	18.04	noarch	linux-aws	< 4.15.0-1021.21	UNKNOWN
ubuntu	14.04	noarch	linux-aws	< 4.4.0-1024.25	UNKNOWN
ubuntu	16.04	noarch	linux-aws	< 4.4.0-1062.71	UNKNOWN
ubuntu	18.04	noarch	linux-azure	< 4.15.0-1023.24	UNKNOWN
ubuntu	16.04	noarch	linux-azure	< 4.15.0-1023.24~16.04.1	UNKNOWN
ubuntu	16.04	noarch	linux-azure-edge	< 4.15.0-1023.24	UNKNOWN
ubuntu	18.04	noarch	linux-gcp	< 4.15.0-1019.20	UNKNOWN