Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-0935
HistoryOct 25, 2021 - 12:00 a.m.

CVE-2021-0935

2021-10-2500:00:00
ubuntu.com
ubuntu.com
21
ip6_xmit
android kernel
out of bounds write
use after free
local escalation

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

5.1%

In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to
a use after free. This could lead to local escalation of privilege with
System execution privileges needed. User interaction is not needed for
exploitation.Product: AndroidVersions: Android kernelAndroid ID:
A-168607263References: Upstream kernel

OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchlinux< 4.4.0-223.256UNKNOWN
ubuntu14.04noarchlinux-aws< 4.4.0-1103.108UNKNOWN
ubuntu16.04noarchlinux-aws< 4.4.0-1139.153UNKNOWN
ubuntu16.04noarchlinux-azure< 4.15.0-1013.13~16.04.2UNKNOWN
ubuntu16.04noarchlinux-gcp< 4.15.0-1014.14~16.04.1UNKNOWN
ubuntu16.04noarchlinux-hwe< 4.15.0-24.26~16.04.1UNKNOWN
ubuntu16.04noarchlinux-kvm< 4.4.0-1104.113UNKNOWN
ubuntu14.04noarchlinux-lts-xenial< 4.4.0-223.256~14.04.1UNKNOWN
ubuntu18.04noarchlinux-snapdragon< 4.15.0-1053.57UNKNOWN

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

5.1%