Home

CVE-2018-9363

Description

In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-65853588 References: Upstream kernel.

Risk Information

Base Score
8.4
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.03

Associated Vulnerability

VulnerabilityOS Platform
Linux kernel for Microsoft Azure Cloud systems (USN-3762-2) linux-image-gcp_4.15.0.1024.38_amd64.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-3762-2) linux-image-gke_4.15.0.1024.38_amd64.debLinux
Linux kernel (USN-3797-1) linux-image-aws_4.4.0.1070.72_amd64.debLinux
Linux kernel (USN-3797-1) linux-image-kvm_4.4.0.1036.35_amd64.debLinux
Linux kernel (USN-3797-1) linux-image-generic_4.4.0.138.144_i386.debLinux
Linux kernel (USN-3797-1) linux-image-generic_4.4.0.138.144_amd64.debLinux
Linux kernel (USN-3797-1) linux-image-lowlatency_4.4.0.138.144_i386.debLinux
Linux kernel (USN-3797-1) linux-image-lowlatency_4.4.0.138.144_amd64.debLinux
Linux kernel (USN-3797-1) linux-image-4.4.0-1036-kvm_4.4.0-1036.42_amd64.debLinux
Linux kernel (USN-3797-1) linux-image-4.4.0-1070-aws_4.4.0-1070.80_amd64.debLinux
Linux kernel (USN-3797-1) linux-image-4.4.0-138-generic_4.4.0-138.164_i386.debLinux
Linux kernel (USN-3797-1) linux-image-4.4.0-138-generic_4.4.0-138.164_amd64.debLinux
Linux kernel (USN-3797-1) linux-image-4.4.0-138-lowlatency_4.4.0-138.164_i386.debLinux
Linux kernel (USN-3797-1) linux-image-4.4.0-138-lowlatency_4.4.0-138.164_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-3797-2) linux-image-aws_4.4.0.1032.32_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-3797-2) linux-image-4.4.0-1032-aws_4.4.0-1032.35_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-3797-2) linux-image-4.4.0-138-generic_4.4.0-138.164~14.04.1_i386.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-3797-2) linux-image-4.4.0-138-generic_4.4.0-138.164~14.04.1_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-3797-2) linux-image-4.4.0-138-lowlatency_4.4.0-138.164~14.04.1_i386.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-3797-2) linux-image-4.4.0-138-lowlatency_4.4.0-138.164~14.04.1_amd64.debLinux
Linux kernel (USN-3820-1) linux-image-4.15.0-1024-gcp_4.15.0-1024.25_amd64.debLinux
Linux kernel (USN-3820-1) linux-image-4.15.0-1026-kvm_4.15.0-1026.26_amd64.debLinux
Linux kernel (USN-3820-1) linux-image-4.15.0-1026-oem_4.15.0-1026.31_amd64.debLinux
Linux kernel (USN-3820-1) linux-image-4.15.0-1027-aws_4.15.0-1027.27_amd64.debLinux
Linux kernel (USN-3820-1) linux-image-4.15.0-1031-azure_4.15.0-1031.32_amd64.debLinux
Linux kernel (USN-3820-1) linux-image-4.15.0-39-generic_4.15.0-39.42_i386.debLinux
Linux kernel (USN-3820-1) linux-image-4.15.0-39-generic_4.15.0-39.42_amd64.debLinux
Linux kernel (USN-3820-1) linux-image-4.15.0-39-lowlatency_4.15.0-39.42_i386.debLinux
Linux kernel (USN-3820-1) linux-image-4.15.0-39-lowlatency_4.15.0-39.42_amd64.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-3820-2) linux-image-gcp_4.15.0.1024.38_amd64.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-3820-2) linux-image-gke_4.15.0.1024.38_amd64.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-3820-2) linux-image-oem_4.15.0.39.62_amd64.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-3820-2) linux-image-4.15.0-1024-gcp_4.15.0-1024.25~16.04.2_amd64.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-3820-2) linux-image-4.15.0-1031-azure_4.15.0-1031.32~16.04.1_amd64.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-3820-2) linux-image-4.15.0-39-generic_4.15.0-39.42~16.04.1_i386.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-3820-2) linux-image-4.15.0-39-generic_4.15.0-39.42~16.04.1_amd64.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-3820-2) linux-image-generic-hwe-16.04_4.15.0.39.62_i386.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-3820-2) linux-image-generic-hwe-16.04_4.15.0.39.62_amd64.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-3820-2) linux-image-4.15.0-39-lowlatency_4.15.0-39.42~16.04.1_i386.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-3820-2) linux-image-4.15.0-39-lowlatency_4.15.0-39.42~16.04.1_amd64.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-3820-2) linux-image-lowlatency-hwe-16.04_4.15.0.39.62_i386.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-3820-2) linux-image-lowlatency-hwe-16.04_4.15.0.39.62_amd64.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-3820-3) linux-image-4.15.0-1031-azure_4.15.0-1031.32~14.04.1+signed1_amd64.debLinux
Linux kernel (USN-3822-1) linux-image-3.13.0-162-generic_3.13.0-162.212_i386.debLinux
Linux kernel (USN-3822-1) linux-image-3.13.0-162-generic_3.13.0-162.212_amd64.debLinux
Linux kernel (USN-3822-1) linux-image-3.13.0-162-lowlatency_3.13.0-162.212_i386.debLinux
Linux kernel (USN-3822-1) linux-image-3.13.0-162-lowlatency_3.13.0-162.212_amd64.debLinux
(RHSA-2019:2029) kernel security, bug fix, and enhancement update bpftool-3.10.0-1062.el7.x86_64.rpmLinux
(RHSA-2019:2029) kernel security, bug fix, and enhancement update kernel-3.10.0-1062.el7.x86_64.rpmLinux
(RHSA-2019:2029) kernel security, bug fix, and enhancement update kernel-abi-whitelists-3.10.0-1062.el7.noarch.rpmLinux
(RHSA-2019:2029) kernel security, bug fix, and enhancement update kernel-debug-3.10.0-1062.el7.x86_64.rpmLinux
(RHSA-2019:2029) kernel security, bug fix, and enhancement update kernel-debug-devel-3.10.0-1062.el7.x86_64.rpmLinux
(RHSA-2019:2029) kernel security, bug fix, and enhancement update kernel-devel-3.10.0-1062.el7.x86_64.rpmLinux
(RHSA-2019:2029) kernel security, bug fix, and enhancement update kernel-doc-3.10.0-1062.el7.noarch.rpmLinux
(RHSA-2019:2029) kernel security, bug fix, and enhancement update kernel-headers-3.10.0-1062.el7.x86_64.rpmLinux
(RHSA-2019:2029) kernel security, bug fix, and enhancement update kernel-tools-3.10.0-1062.el7.x86_64.rpmLinux
(RHSA-2019:2029) kernel security, bug fix, and enhancement update kernel-tools-libs-3.10.0-1062.el7.x86_64.rpmLinux
(RHSA-2019:2029) kernel security, bug fix, and enhancement update kernel-tools-libs-devel-3.10.0-1062.el7.x86_64.rpmLinux
(RHSA-2019:2029) kernel security, bug fix, and enhancement update perf-3.10.0-1062.el7.x86_64.rpmLinux
(RHSA-2019:2029) kernel security, bug fix, and enhancement update python-perf-3.10.0-1062.el7.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234