Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-0326
HistoryFeb 10, 2021 - 12:00 a.m.

CVE-2021-0326

2021-02-1000:00:00
ubuntu.com
ubuntu.com
10

7.5 High

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

7.9 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

73.9%

In p2p_copy_client_info of p2p.c, there is a possible out of bounds write
due to a missing bounds check. This could lead to remote code execution if
the target device is performing a Wi-Fi Direct search, with no additional
execution privileges needed. User interaction is not needed for
exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1
Android-9Android ID: A-172937525

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchwpa< 2:2.6-15ubuntu2.7UNKNOWN
ubuntu20.04noarchwpa< 2:2.9-1ubuntu4.2UNKNOWN
ubuntu20.10noarchwpa< 2:2.9-1ubuntu8.1UNKNOWN
ubuntu14.04noarchwpa< 2.1-0ubuntu1.7+esm3) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu16.04noarchwpa< 2.4-0ubuntu6.7UNKNOWN

7.5 High

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

7.9 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

73.9%