cnvd-2017-00511
Vulnerability from cnvd
Title
Google Android Qualcomm Fuse File System拒绝服务漏洞
Description
Android是美国谷歌（Google）公司和开放手持设备联盟（简称OHA）共同开发的一套以Linux为基础的开源操作系统。Qualcomm Fuse file是其中的一个用户空间文件系统。 Google Android Qualcomm Fuse File System存在拒绝服务漏洞。远程攻击者可借助特制的文件利用该漏洞造成设备挂起或重启，导致拒绝服务。
Severity
中
Patch Name
Google Android Qualcomm Fuse File System拒绝服务漏洞的补丁
Patch Description
Android是美国谷歌（Google）公司和开放手持设备联盟（简称OHA）共同开发的一套以Linux为基础的开源操作系统。Qualcomm Fuse file是其中的一个用户空间文件系统。 Google Android Qualcomm Fuse File System存在拒绝服务漏洞。远程攻击者可借助特制的文件利用该漏洞造成设备挂起或重启，导致拒绝服务。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description

目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： https://source.android.com/security/bulletin/2017-01-01.html

Reference
http://www.securityfocus.com/bid/95245
Impacted products
Name
['google Android 4.0.4', 'google Android 4.0', 'google Android 4.3', 'google Android 4.1.1', 'google Android 4.1.2', 'Google Android 4.4', 'Google Android 5.0', 'Google Android 5.1', 'Google Android 6.0', 'Google Android 6.0.1', 'Google Android 5.1.', 'Google Android 5.0.1', 'Google Android 4.4.3', 'Google Android 4.4.1', 'Google Android 4.3.1', 'Google Android 4.2.1', 'Google Android 4.0.3', 'Google Android 4.0.2', 'Google Android 4.0.1', 'Google Android 6.1', 'Google Android 4.2', 'Google Android 4.1']
Show details on source website

To clipboard 

{
  "bids": {
    "bid": {
      "bidNumber": "95245"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2016-8463",
      "cveUrl": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8463"
    }
  },
  "description": "Android\u662f\u7f8e\u56fd\u8c37\u6b4c\uff08Google\uff09\u516c\u53f8\u548c\u5f00\u653e\u624b\u6301\u8bbe\u5907\u8054\u76df\uff08\u7b80\u79f0OHA\uff09\u5171\u540c\u5f00\u53d1\u7684\u4e00\u5957\u4ee5Linux\u4e3a\u57fa\u7840\u7684\u5f00\u6e90\u64cd\u4f5c\u7cfb\u7edf\u3002Qualcomm Fuse file\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u7528\u6237\u7a7a\u95f4\u6587\u4ef6\u7cfb\u7edf\u3002\r\n\r\nGoogle Android Qualcomm Fuse File System\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u501f\u52a9\u7279\u5236\u7684\u6587\u4ef6\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u8bbe\u5907\u6302\u8d77\u6216\u91cd\u542f\uff0c\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u3002",
  "discovererName": "Google",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://source.android.com/security/bulletin/2017-01-01.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-00511",
  "openTime": "2017-01-17",
  "patchDescription": "Android\u662f\u7f8e\u56fd\u8c37\u6b4c\uff08Google\uff09\u516c\u53f8\u548c\u5f00\u653e\u624b\u6301\u8bbe\u5907\u8054\u76df\uff08\u7b80\u79f0OHA\uff09\u5171\u540c\u5f00\u53d1\u7684\u4e00\u5957\u4ee5Linux\u4e3a\u57fa\u7840\u7684\u5f00\u6e90\u64cd\u4f5c\u7cfb\u7edf\u3002Qualcomm Fuse file\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u7528\u6237\u7a7a\u95f4\u6587\u4ef6\u7cfb\u7edf\u3002\r\n\r\nGoogle Android Qualcomm Fuse File System\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u501f\u52a9\u7279\u5236\u7684\u6587\u4ef6\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u8bbe\u5907\u6302\u8d77\u6216\u91cd\u542f\uff0c\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Google Android Qualcomm Fuse File System\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "google Android 4.0.4",
      "google Android 4.0",
      "google Android 4.3",
      "google Android 4.1.1",
      "google Android 4.1.2",
      "Google Android 4.4",
      "Google Android 5.0",
      "Google Android 5.1",
      "Google Android 6.0",
      "Google Android 6.0.1",
      "Google Android 5.1.",
      "Google Android 5.0.1",
      "Google Android 4.4.3",
      "Google Android 4.4.1",
      "Google Android 4.3.1",
      "Google Android 4.2.1",
      "Google Android 4.0.3",
      "Google Android 4.0.2",
      "Google Android 4.0.1",
      "Google Android 6.1",
      "Google Android 4.2",
      "Google Android 4.1"
    ]
  },
  "referenceLink": "http://www.securityfocus.com/bid/95245",
  "serverity": "\u4e2d",
  "submitTime": "2017-01-13",
  "title": "Google Android Qualcomm Fuse File System\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.