UBUNTU-CVE-2017-0794
A elevation of privilege vulnerability in the Upstream kernel scsi driver. Product: Android. Versions: Android kernel. Android ID: A-35644812.
02 / AFFECTED SOFTWARE
Affected packages
139 explicit affected versions
40 explicit affected versions
62 explicit affected versions
21 explicit affected versions
6 explicit affected versions
5 explicit affected versions
26 explicit affected versions
3 explicit affected versions
38 explicit affected versions
35 explicit affected versions
26 explicit affected versions
51 explicit affected versions
6 explicit affected versions
12 explicit affected versions
1 explicit affected versions
1 explicit affected versions
23 explicit affected versions
1 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
A elevation of privilege vulnerability in the Upstream kernel scsi driver. Product: Android. Versions: Android kernel. Android ID: A-35644812.
05 / REFERENCES
Further evidence
- https://android.googlesource.com/platform/cts/+/0e7c60f79a319b4a4a3c5eee977ad912524da435/hostsidetests/security/securityPatch/Bug-35644812/poc.c
- https://source.android.com/security/bulletin/2017-09-01
- https://ubuntu.com/security/CVE-2017-0794
- https://ubuntu.com/security/notices/USN-3798-1
- https://ubuntu.com/security/notices/USN-3798-2
- https://www.cve.org/CVERecord?id=CVE-2017-0794