CVE-2017-6899 - The msm_bus_dbg_update_request_write function in drivers/platform/msm/msm_bus/msm_bus_dbg.c in andro

CVE-2017-6899

Summary

The msm_bus_dbg_update_request_write function in drivers/platform/msm/msm_bus/msm_bus_dbg.c in android_kernel_huawei_msm8916 through 2017-06-16 in LineageOS, and possibly other kernels for MSM devices, allows attackers to cause a denial of service (NULL pointer dereference and device crash) via a crafted /sys/kernel/debug/msm-bus-dbg/client-data/update-request write request.

References

Vulnerable Configurations

cpe:2.3:o:lineageos:lineageos:13.0:*:*:*:*:*:*:*
cpe:2.3:o:lineageos:lineageos:13.0:*:*:*:*:*:*:*
cpe:2.3:o:lineageos:lineageos:15.1:*:*:*:*:*:*:*
cpe:2.3:o:lineageos:lineageos:15.1:*:*:*:*:*:*:*
cpe:2.3:o:lineageos:lineageos:16.0:*:*:*:*:*:*:*
cpe:2.3:o:lineageos:lineageos:16.0:*:*:*:*:*:*:*
cpe:2.3:o:lineageos:lineageos:2017-06-16:*:*:*:*:*:*:*
cpe:2.3:o:lineageos:lineageos:2017-06-16:*:*:*:*:*:*:*

CVSS

Base:	4.9 (as of 05-07-2017 - 18:12)
Impact:
Exploitability:

CWE

CWE-476

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	COMPLETE

cvss-vector via4

AV:L/AC:L/Au:N/C:N/I:N/A:C

refmap via4

bid	99107
misc	http://blog.secret-team.cn/index.php/archives/5/

Last major update

05-07-2017 - 18:12

Published

16-06-2017 - 17:29

Last modified

05-07-2017 - 18:12