ИнструментыУязвимости БДУБлоклистыРасширениеУтилитыБлогAPIМониторинг
Главная → Уязвимости → CVE-2018-5852
8.4высокая

CVE-2018-5852

Описание

An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat'

Затрагиваемое ПО
Qualcomm Mdm9206 firmwareQualcomm Mdm9206Qualcomm Mdm9607 firmwareQualcomm Mdm9607Qualcomm Mdm9640 firmwareQualcomm Mdm9640Qualcomm Mdm9650 firmwareQualcomm Mdm9650Qualcomm Msm8909w firmwareQualcomm Msm8909wQualcomm Sd 210 firmwareQualcomm Sd 210Qualcomm Sd 212 firmwareQualcomm Sd 212Qualcomm Sd 205 firmwareQualcomm Sd 205Qualcomm Sd 425 firmwareQualcomm Sd 425Qualcomm Sd 430 firmwareQualcomm Sd 430Qualcomm Sd 450 firmwareQualcomm Sd 450Qualcomm Sd 615 firmwareQualcomm Sd 615Qualcomm Sd 616 firmware
CVSS
Балл8.4 — высокая
ВекторCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Источники
https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html