CVE-2018-9568
CVE-2018-9568
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Ciclo de vida
06 dic 2018Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-113509306. References: Upstream kernel.
Productos afectados
Google Inc. · Android¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →Referencias
https://access.redhat.com/errata/RHSA-2019:0512https://access.redhat.com/errata/RHSA-2019:0514https://access.redhat.com/errata/RHSA-2019:2696https://access.redhat.com/errata/RHSA-2019:2730https://access.redhat.com/errata/RHSA-2019:2736https://access.redhat.com/errata/RHSA-2019:3967https://access.redhat.com/errata/RHSA-2019:4056https://access.redhat.com/errata/RHSA-2019:4159https://access.redhat.com/errata/RHSA-2019:4164https://access.redhat.com/errata/RHSA-2019:4255https://source.android.com/security/bulletin/2018-12-01https://usn.ubuntu.com/3880-1/