CVE-2018-11294

EPSS 0.3%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

18 sep 2018Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, WLAN handler indication from the firmware gets the information for 4 access categories. While processing this information only the first 3 AC information is copied due to the improper conditional logic used to compare with the max number of categories.

Productos afectados

Qualcomm, Inc. · Android for MSM, Firefox OS for MSM, QRD Android

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=fc7f79288ba28e82d04153763023b69755d6c3a1 https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin http://www.securityfocus.com/bid/107770