CVE-2023-20938

🗓️ 28 Feb 2023 00:00:00Reported by ubuntu.comType

Possible local escalation of privilege in Android binder_transaction_buffer_release due to improper input validation. No user interaction required

Reporter	Title	Published	Views	Family All 52
OSV	[Binder][bug] Incorrect bound check in `binder_transaction_buffer_release` in binder.c	1 Feb 202300:00	–	osv
OSV	linux-gcp, linux-gcp-5.15, linux-gke, linux-gke-5.15, linux-gkeop, linux-oracle-5.15 vulnerabilities	18 May 202320:38	–	osv
OSV	linux-raspi vulnerabilities	17 May 202320:49	–	osv
OSV	linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-hwe-5.15, linux-ibm, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle vulnerabilities	16 May 202314:11	–	osv
OSV	linux-intel-iotg vulnerabilities	1 Jun 202321:39	–	osv
OSV	linux-ibm, linux-ibm-5.4 vulnerabilities	14 Mar 202318:45	–	osv
OSV	linux-gcp-5.4 vulnerabilities	8 Mar 202320:14	–	osv
OSV	linux-raspi vulnerabilities	7 Mar 202319:29	–	osv
OSV	linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gke, linux-gkeop, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.4 vulnerabilities	3 Mar 202314:58	–	osv
OSV	linux-raspi-5.4 vulnerabilities	9 Mar 202312:46	–	osv

Source	Link
source	www.source.android.com/docs/security/bulletin/2023-02-01
ubuntu	www.ubuntu.com/security/notices/USN-5917-1
ubuntu	www.ubuntu.com/security/notices/USN-5934-1
ubuntu	www.ubuntu.com/security/notices/USN-5939-1
ubuntu	www.ubuntu.com/security/notices/USN-5940-1
ubuntu	www.ubuntu.com/security/notices/USN-5951-1
ubuntu	www.ubuntu.com/security/notices/USN-6000-1
ubuntu	www.ubuntu.com/security/notices/USN-6080-1
ubuntu	www.ubuntu.com/security/notices/USN-6085-1
ubuntu	www.ubuntu.com/security/notices/USN-6090-1

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	20.04	noarch	linux	5.4.0-144.161	UNKNOWN
ubuntu	22.04	noarch	linux	5.15.0-72.79	UNKNOWN
ubuntu	20.04	noarch	linux-aws	5.4.0-1097.105	UNKNOWN
ubuntu	22.04	noarch	linux-aws	5.15.0-1036.40	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	5.15.0-1036.40~20.04.1	UNKNOWN
ubuntu	18.04	noarch	linux-aws-5.4	5.4.0-1097.105~18.04.1	UNKNOWN
ubuntu	20.04	noarch	linux-azure	5.4.0-1104.110	UNKNOWN
ubuntu	22.04	noarch	linux-azure	5.15.0-1038.45	UNKNOWN
ubuntu	20.04	noarch	linux-azure-5.15	5.15.0-1038.45~20.04.1	UNKNOWN
ubuntu	18.04	noarch	linux-azure-5.4	5.4.0-1104.110~18.04.1	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

28 Feb 2023 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS37.8

EPSS0.000