cbcvebase.
CVE-2017-13168
published 2017-12-06

CVE-2017-13168: An elevation of privilege vulnerability in the kernel scsi driver. Product: Android. Versions: Android kernel. Android ID A-65023233.

high7.8CVSS 3.0
AVLACLPRLUINSUCHIHAH
An elevation of privilege vulnerability in the kernel scsi driver. Product: Android. Versions: Android kernel. Android ID A-65023233.

Affected

13 ranges
VendorProductVersion rangeFixed in
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
debianlinux< linux 4.17.6-1 (bookworm)linux 4.17.6-1 (bookworm)
google_incandroid
linuxlinux_kernel>= 0 < 4.17.6-14.17.6-1
linuxlinux_kernel>= 0 < 4.17.6-14.17.6-1
linuxlinux_kernel>= 0 < 4.17.6-14.17.6-1
linuxlinux_kernel>= 0 < 4.17.6-14.17.6-1
linuxlinux_kernel>= 0 < 3.13.0-162.2123.13.0-162.212
linuxlinux_kernel>= 0 < 4.4.0-134.1604.4.0-134.160
linuxlinux_kernel>= 0 < 4.15.0-39.424.15.0-39.42

CVSS provenance

nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH