CVE-2019-2054 — Authentication Bypass by Primary Weakness in Google Android
CWE-305 — Authentication Bypass by Primary WeaknessCWE-284 — Improper Access Control11 documents8 sources
Severity
7.8HIGHNVD
OSV8.1OSV6.8
EPSS
0.3%
top 42.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 8
Latest updateMay 24
Description
In the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due to seccomp policies that allow the use of ptrace. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-119769499
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9
Affected Packages4 packages
Also affects: Ubuntu Linux 14.04, 16.04
🔴Vulnerability Details
4📋Vendor Advisories
5Debian▶
CVE-2019-2054: linux - In the seccomp implementation prior to kernel version 4.8, there is a possible s...↗2019