Lucene search

MitreCVE-2017-6899

HistoryJun 16, 2017 - 5:29 p.m.

CVE-2017-6899

2017-06-1617:29:00

CWE-476

mitre

web.nvd.nist.gov

cve-2017-6899

msm_bus_dbg_update_request_write

android_kernel_huawei_msm8916

denial of service

null pointer dereference

device crash

lineageos

nvd

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

21.7%

JSON

The msm_bus_dbg_update_request_write function in drivers/platform/msm/msm_bus/msm_bus_dbg.c in android_kernel_huawei_msm8916 through 2017-06-16 in LineageOS, and possibly other kernels for MSM devices, allows attackers to cause a denial of service (NULL pointer dereference and device crash) via a crafted /sys/kernel/debug/msm-bus-dbg/client-data/update-request write request.

Affected configurations

Nvd

Node

lineageoslineageosRange≤2017-06-16

VendorProductVersionCPE
lineageoslineageos*cpe:2.3:o:lineageos:lineageos:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
lineageos	lineageos	*	cpe:2.3:o:lineageos:lineageos::::::::

References

blog.secret-team.cn/index.php/archives/5/

www.securityfocus.com/bid/99107

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

21.7%

JSON

Related for CVE-2017-6899