| Vulnerability Name: | CVE-2017-8244 (CCN-126049) | ||||||||||||
| Assigned: | 2017-05-01 | ||||||||||||
| Published: | 2017-05-01 | ||||||||||||
| Updated: | 2020-11-09 | ||||||||||||
| Summary: | In core_info_read and inst_info_read in all Android releases from CAF using the Linux kernel, variable "dbg_buf", "dbg_buf->curr" and "dbg_buf->filled_size" could be modified by different threads at the same time, but they are not protected with mutex or locks. Buffer overflow is possible on race conditions. "buffer->curr" itself could also be overwritten, which means that it may point to anywhere of kernel memory (for write). | ||||||||||||
| CVSS v3 Severity: | 7.0 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) 6.1 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
7.3 High (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
| ||||||||||||
| CVSS v2 Severity: | 6.9 Medium (CVSS v2 Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C)
| ||||||||||||
| Vulnerability Type: | CWE-362 | ||||||||||||
| Vulnerability Consequences: | Gain Access | ||||||||||||
| References: | Source: MITRE Type: CNA CVE-2017-8244 Source: BID Type: Third Party Advisory, VDB Entry 98547 Source: CCN Type: BID-98547 Linux Kernel CVE-2017-8244 Multiple Local Buffer Overflow Vulnerabilities Source: XF Type: UNKNOWN caf-cve20178244-bo(126049) Source: CONFIRM Type: Vendor Advisory https://source.android.com/security/bulletin/pixel/2017-12-01 Source: CCN Type: CodeAurora QCIR-2017-00035-1 Buffer overflow in msm_vidc debugfs driver core_info_read and inst_info_read (CVE-2017-8244) Source: CONFIRM Type: Broken Link https://www.codeaurora.org/buffer-overflow-msmvidc-debugfs-driver-coreinforead-and-instinforead-cve-2017-8244 | ||||||||||||
| Vulnerable Configuration: | Configuration 1: Denotes that component is vulnerable | ||||||||||||
| BACK | |||||||||||||