ByteOS Network

NVD Vulnerability Details :

CVE-2018-9568

Analyzed

Source-security@android.com

Published At-06 Dec, 2018 | 14:29

Updated At-24 Feb, 2023 | 18:43

In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-113509306. References: Upstream kernel.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Google LLC

>>android>>-

cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>12.04

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*

Canonical Ltd.

>>ubuntu_linux>>14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

Red Hat, Inc.

>>enterprise_linux_desktop>>7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_server>>7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_server_aus>>7.6

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_server_eus>>7.6

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_server_tus>>7.6

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_workstation>>7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions before 3.10.108(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 3.11(inclusive) to 3.16.58(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 3.17(inclusive) to 3.18.77(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 3.19(inclusive) to 4.1.46(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 4.2(inclusive) to 4.4.94(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 4.5(inclusive) to 4.9.55(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 4.10(inclusive) to 4.13.6(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-704	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://access.redhat.com/errata/RHSA-2019:0512	security@android.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:0514	security@android.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2696	security@android.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2730	security@android.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2736	security@android.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3967	security@android.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:4056	security@android.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:4159	security@android.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:4164	security@android.com	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:4255	security@android.com	Third Party Advisory
https://source.android.com/security/bulletin/2018-12-01	security@android.com	Patch Vendor Advisory
https://usn.ubuntu.com/3880-1/	security@android.com	Third Party Advisory
https://usn.ubuntu.com/3880-2/	security@android.com	Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History