Lucene search
Huawei TechnologiesHUAWEI-SA-20191030-01-BINDERHistoryOct 30, 2019 - 12:00 a.m.
Security Advisory - Use-after-free Vulnerability in Android Kernel
2019-10-3000:00:00
Huawei Technologies
www.huawei.com
92
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.003 Low
EPSS
Percentile
69.7%
There is a use-after-free vulnerability in binder.c of Android kernel. Successful exploitation may cause the attacker elevate the privilege. (Vulnerability ID: HWPSIRT-2019-10100)
This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2019-2215.
Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191030-01-binder-en
Affected configurations
Node
huaweialp-al00bRange<10.0.0.162
ORhuaweialp-tl00bRange<10.0.0.162
ORhuaweiwarsaw-al00Range<9.1.0.126
ORhuaweiares-al00bRange<9.1.0.165
ORhuaweiares-al10dRange<9.1.0.165
ORhuaweiares-tl00chwMatch8.2.0.163
ORhuaweibla-al00bRange<10.0.0.170
ORhuaweibla-l29cRange<9.1.0.300
ORhuaweibla-tl00bRange<10.0.0.170
ORhuaweiwarsaw-al00Range<8.0.0.377
ORhuaweiberkeley-l09Range<9.1.0.351
ORhuaweiberkeley-tl10Range<9.1.0.333
ORhuaweicolumbia-al10bMatch8.1.0.186
ORhuaweicolumbia-l29dRange<9.1.0.325
ORhuaweicornell-tl10bRange<9.1.0.321
ORhuaweiduke-l09iRange<9.0.1.171
ORhuaweidura-tl00aRange<1.0.0.190
ORhuaweifigo-al10bRange<9.1.0.130
ORhuaweiflorida-al20bRange<9.1.0.128
ORhuaweiflorida-l03Range<9.1.0.154
ORhuaweiflorida-l21Range<9.1.0.154
ORhuaweiflorida-l22Range<9.1.0.150
ORhuaweiflorida-tl10bRange<9.1.0.128
ORhuaweimate_s_firmwareRange<9.1.0.321
ORhuaweihuawei_p20Range<9.1.0.312
ORhuaweihuawei_p20Range<9.1.0.200
ORhuaweihuawei_p20Range<9.1.0.200
ORhuaweihuawei_p20Range<9.1.0.246
ORhuaweihuawei_y9_2019Range<9.1.0.297
ORhuaweihuawei_nova_2sRange<9.1.0.210
ORhuaweihuawei_nova_3Range<9.1.0.351
ORhuaweihuawei_nova_3eRange<9.1.0.200
ORhuaweihuawei_nova_3eRange<9.1.0.201
ORhuaweihuawei_nova_3eRange<9.1.0.201
ORhuaweihonor_view_20Range<10.1.0.214
ORhuaweivicky-al00aRange<9.1.0.260
ORhuaweijohnson-tl00dMatch8.2.0.165
ORhuaweileland-al10bRange<9.1.0.130
ORhuaweileland-l21aRange<9.1.0.156
ORhuaweileland-l32aRange<9.1.0.153
ORhuaweileland-tl10bRange<9.1.0.130
ORhuaweileland-tl10cRange<9.1.0.130
ORhuaweilelandp-al00cRange<9.1.0.130
ORhuaweilelandp-l22cRange<9.1.0.156
ORhuaweineo-al00dRange<9.1.0.321
ORhuaweiprinceton-al10bRange<10.1.0.160
ORhuaweiwarsaw-al00Range<8.0.0.376
ORhuaweistanford-l09Range<9.1.0.211
ORhuaweistanford-l09sRange<9.1.0.210
ORhuaweisydney-l21Range<9.1.0.212
ORhuaweisydney-tl00Range<9.1.0.212
ORhuaweisydneym-l01Range<9.1.0.212
ORhuaweitony-al00bRange<10.0.0.175
ORhuaweitony-tl00bRange<10.0.0.175
ORhuaweiyale-al50aRange<10.1.0.160
ORhuaweiyale-l21aRange<10.1.0.231
ORhuaweiyale-tl00bRange<10.1.0.160
ORhuaweihonor_9iRange<9.1.0.130
Related
checkpoint_advisories
checkpoint_advisories
Android Binder Use After Free (CVE-2019-2215)
2020-01-15 00:00:00
debiancve
debiancve
CVE-2019-2215
2019-10-11 19:15:10
cvelist
cvelist
CVE-2019-2215
2019-10-11 18:16:48
threatpost
threatpost
Google Warns of Android Zero-Day Bug Under Active Attack
2019-10-04 16:20:54
SideWinder APT Targets Nepal, Afghanistan in Wide-Ranging Spy Campaign
2020-12-09 19:53:13
A Brisk Private Trade in Zero-Days Widens Their Use
2020-04-06 21:05:06
cve
cve
CVE-2019-2215
2019-10-11 19:15:10
githubexploit
githubexploit
Exploit for Use After Free in Google Android
2021-05-07 16:48:40
Exploit for Use After Free in Google Android
2019-10-04 06:32:08
Exploit for Use After Free in Google Android
2019-10-16 11:27:44
metasploit
metasploit
Android Binder Use-After-Free Exploit
2019-10-17 10:48:49
exploitpack
exploitpack
Android - Binder Driver Use-After-Free
2019-10-04 00:00:00
thn
thn
Researchers Uncover SideWinder's Latest Server-Based Polymorphism Technique
2023-05-09 09:39:00
New 0-Day Flaw Affecting Most Android Phones Being Exploited in the Wild
2019-10-04 09:03:00
SideWinder Hackers Use Fake Android VPN Apps to Target Pakistani Entities
2022-06-02 09:09:00
packetstorm
packetstorm
Android Binder Use-After-Free
2019-10-18 00:00:00
Android Binder Use-After-Free
2020-02-24 00:00:00
zdt
zdt
Android Binder - Use-After-Free Exploit
2020-02-24 00:00:00
Android - Binder Driver Use-After-Free Exploit
2019-10-04 00:00:00
prion
prion
Design/Logic Flaw
2019-10-11 19:15:00
symantec
symantec
Google Android Binder CVE-2019-2215 Local Privilege Escalation Vulnerability
2019-10-02 00:00:00
attackerkb
attackerkb
CVE-2019-2215
2019-10-11 00:00:00
nvd
nvd
CVE-2019-2215
2019-10-11 19:15:10
googleprojectzero
googleprojectzero
Bad Binder: Android In-The-Wild Exploit
2019-11-21 00:00:00
A Very Powerful Clipboard: Analysis of a Samsung in-the-wild exploit chain
2022-11-04 00:00:00
Root Cause Analyses for 0-day In-the-Wild Exploits
2020-07-29 00:00:00
redhatcve
redhatcve
CVE-2019-2215
2020-02-21 15:44:29
ubuntucve
ubuntucve
CVE-2019-2215
2019-10-11 00:00:00
CVE-2020-0030
2020-02-13 00:00:00
exploitdb
exploitdb
Android Binder - Use-After-Free (Metasploit)
2020-02-24 00:00:00
Android - Binder Driver Use-After-Free
2019-10-04 00:00:00
cisa_kev
cisa_kev
Android Kernel Out-of-Bounds Write Vulnerability
2021-11-03 00:00:00
Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability
2021-11-03 00:00:00
Android Kernel Use-After-Free Vulnerability
2021-11-03 00:00:00
trendmicroblog
trendmicroblog
qualysblog
qualysblog
androidsecurity
androidsecurity
Pixel Update Bulletin—October 2019
2019-10-07 00:00:00
fireeye
fireeye
impervablog
impervablog
The State of Vulnerabilities in 2019
2020-01-23 08:56:58
github
github
Pwning the all Google phone with a non-Google bug
2023-01-23 15:05:19
ubuntu
ubuntu
Linux kernel vulnerability
2019-11-13 00:00:00
Linux kernel vulnerabilities
2019-11-13 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4186-1)
2019-11-13 00:00:00
Slackware: Security Advisory (SSA:2019-311-01)
2022-04-21 00:00:00
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-2693)
2020-01-23 00:00:00
nessus
nessus
Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-4186-1)
2019-11-13 00:00:00
Slackware 14.2 : Slackware 14.2 kernel (SSA:2019-311-01)
2019-11-08 00:00:00
EulerOS 2.0 SP5 : kernel (EulerOS-SA-2019-2693)
2019-12-23 00:00:00
slackware
slackware
[slackware-security] Slackware 14.2 kernel
2019-11-07 22:31:40
debian
debian
[SECURITY] [DLA 2068-1] linux security update
2020-01-18 04:38:12
[SECURITY] [DLA 2114-1] linux-4.9 security update
2020-03-02 18:14:56
osv
osv
linux - security update
2020-01-17 00:00:00
linux-4.9 - security update
2020-02-21 00:00:00
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.003 Low
EPSS
Percentile
69.7%
Related for HUAWEI-SA-20191030-01-BINDER