CVE-2017-0794 — Race Condition in Google Android

CWE-362 — Race Condition10 documents7 sources
Severity
7.8HIGHNVD
EPSS
0.1%
top 82.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Linux KernelGoogle AndroidGoogle INC Android
Timeline
PublishedSep 8
Latest updateMay 13

Description

A elevation of privilege vulnerability in the Upstream kernel scsi driver. Product: Android. Versions: Android kernel. Android ID: A-35644812.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages3 packages

▶CVEListV5google_inc/androidAndroid kernel
▶Ubuntulinux/linux_kernel< 3.13.0-161.211+1

🔴Vulnerability Details

4
GHSA
GHSA-fj69-r64j-ffgq: A elevation of privilege vulnerability in the Upstream kernel scsi driver↗2022-05-13
▶
OSV
linux vulnerabilities↗2018-10-23
▶
CVEList
CVE-2017-0794: A elevation of privilege vulnerability in the Upstream kernel scsi driver↗2017-09-08
▶
OSV
CVE-2017-0794: A elevation of privilege vulnerability in the Upstream kernel scsi driver↗2017-09-08
▶

📋Vendor Advisories

3
Ubuntu
Linux kernel vulnerabilities↗2018-10-23
▶
Ubuntu
Linux kernel (Trusty HWE) vulnerabilities↗2018-10-23
▶
Android
CVE-2017-0794: SCSI driver↗2017-09-01
▶

💬Community

2
Bugzilla
CVE-2017-5495 quagga: Telnet interface input buffer allocates unbounded amounts of memory↗2017-01-24
▶
Bugzilla
CVE-2016-4049 quagga: denial of service vulnerability in BGP routing daemon↗2016-04-28
▶
CVE-2017-0794 — Race Condition in Google Android | cvebase