CVE-2017-11090
CVE-2017-11090
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
16 Nov 2017Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a buffer overread is observed in __wlan_hdd_cfg80211_set_pmksa when user space application sends PMKID of size less than WLAN_PMKID_LEN bytes.
Affected products
Qualcomm, Inc. · Android for MSM, Firefox OS for MSM, QRD AndroidWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →