NVD

Id
20629  
Name
CVE-2016-5340  
Description
The is_ashmem_file function in drivers/staging/android/ashmem.c in a certain Qualcomm Innovation Center (QuIC) Android patch for the Linux kernel 3.x mishandles pointer validation within the KGSL Linux Graphics Module, which allows attackers to bypass intended access restrictions by using the /ashmem string as the dentry name.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-08-07  
Modified Date
2016-11-28  
Seq
2016-5340  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
112903 20629 CVE-2016-5340 http://source.android.com/security/bulletin/2016-10-01.html  View
112904 20629 CVE-2016-5340 92374  View
112905 20629 CVE-2016-5340 https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=06e51489061e5473b4e2035c79dcf7c27a6f75a6  View
112906 20629 CVE-2016-5340 https://www.codeaurora.org/invalid-path-check-ashmem-memory-file-cve-2016-5340  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3509 JVNDB-2016-004282 Linux Kernel 用の特定の QuIC Android パッチの drivers/staging/android/ashmem.c におけるアクセス制限を回避される脆弱性 Linux Kernel 用の特定の Qualcomm Innovation Center (QuIC) Android パッチの drivers/staging/android/ashmem.c の is_ashmem_file 関数は、KGSL Linux Graphics Module のポインタ検証を誤って処理するため、アクセス制限を回避される脆弱性が存在します。 CVE-2016-5340 91846 CVE-2016-5340 20629 7.2 8.4 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004282.html 2016-07-28 2016-11-17 View