CVE-2017-9725

{"id": "CVE-2017-9725", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2017-09-21T15:29:00.977", "references": [{"url": "http://www.securityfocus.com/bid/100658", "tags": ["Third Party Advisory", "VDB Entry"], "source": "product-security@qualcomm.com"}, {"url": "https://access.redhat.com/errata/RHSA-2018:0676", "source": "product-security@qualcomm.com"}, {"url": "https://access.redhat.com/errata/RHSA-2018:1062", "source": "product-security@qualcomm.com"}, {"url": "https://access.redhat.com/errata/RHSA-2018:1130", "source": "product-security@qualcomm.com"}, {"url": "https://access.redhat.com/errata/RHSA-2018:1170", "source": "product-security@qualcomm.com"}, {"url": "https://source.android.com/security/bulletin/2017-09-01", "tags": ["Patch", "Vendor Advisory"], "source": "product-security@qualcomm.com"}, {"url": "http://www.securityfocus.com/bid/100658", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://access.redhat.com/errata/RHSA-2018:0676", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://access.redhat.com/errata/RHSA-2018:1062", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://access.redhat.com/errata/RHSA-2018:1130", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://access.redhat.com/errata/RHSA-2018:1170", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://source.android.com/security/bulletin/2017-09-01", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-682"}]}], "descriptions": [{"lang": "en", "value": "In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail."}, {"lang": "es", "value": "En todos los productos Qualcomm con distribuciones Android desde CAF empleando el kernel Linux, durante la asignaci\u00f3n de DMA, el tama\u00f1o de asignaci\u00f3n se trunca, lo que permite que la asignaci\u00f3n sea un \u00e9xito cuando deber\u00eda fallar. Esto se debe a un tipo de tama\u00f1o de datos err\u00f3neo."}], "lastModified": "2024-11-21T03:36:42.583", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EFB2D835-93F5-428E-A606-2DA253C97EB6", "versionEndIncluding": "8.0"}], "operator": "OR"}]}], "sourceIdentifier": "product-security@qualcomm.com"}