deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-15752
Published: 2018-10-02
Description: An issue was discovered in the MensaMax (aka com.breustedt.mensamax) application 4.3 for Android. Cleartext Transmission of Sensitive Information allows man-in-the-middle attackers to eavesdrop authentication information between the application and the server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-319
References: https://advisories.e2security.de/2018/E2SA-2018-01.txt; https://seclists.org/bugtraq/2018/Oct/3; https://advisories.e2security.de/2018/E2SA-2018-01.txt
CVE: CVE-2018-15753
Published: 2018-10-02
Description: An issue was discovered in the MensaMax (aka com.breustedt.mensamax) application 4.3 for Android. The use of a Hard-coded DES Cryptographic Key allows an attacker who decodes the application to decrypt transmitted data such as the login username and password.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://advisories.e2security.de/2018/E2SA-2018-01.txt; https://seclists.org/bugtraq/2018/Oct/3; https://advisories.e2security.de/2018/E2SA-2018-01.txt
CVE: CVE-2018-16984
Published: 2018-10-02
Description: An issue was discovered in Django 2.1 before 2.1.2, in which unprivileged users can read the password hashes of arbitrary accounts. The read-only password widget used by the Django Admin to display an obfuscated password hash was bypassed if a user has only the "view" permission (new in Django 2.1), resulting in display of the entire password hash to those users. This may result in a vulnerability for sites with legacy user accounts using insecure hashes.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-522
References: http://www.securitytracker.com/id/1041749; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.djangoproject.com/weblog/2018/oct/01/security-release/
CVE: CVE-2018-17587
Published: 2018-10-02
Description: AirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149600/Airties-AIR5750-1.0.0.18-Cross-Site-Scripting.html; https://www.exploit-db.com/exploits/45525/; http://packetstormsecurity.com/files/149600/Airties-AIR5750-1.0.0.18-Cross-Site-Scripting.html
CVE: CVE-2018-17588
Published: 2018-10-02
Description: AirTies Air 5021 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149598/Airties-AIR5021-1.0.0.18-Cross-Site-Scripting.html; https://www.exploit-db.com/exploits/45525/; http://packetstormsecurity.com/files/149598/Airties-AIR5021-1.0.0.18-Cross-Site-Scripting.html
CVE: CVE-2018-17589
Published: 2018-10-02
Description: AirTies Air 5650 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149599/Airties-AIR5650-1.0.0.18-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/149599/Airties-AIR5650-1.0.0.18-Cross-Site-Scripting.html
CVE: CVE-2018-17590
Published: 2018-10-02
Description: AirTies Air 5442 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149594/Airties-AIR5443v2-1.0.0.18-Cross-Site-Scripting.html; https://www.exploit-db.com/exploits/45525/; http://packetstormsecurity.com/files/149594/Airties-AIR5443v2-1.0.0.18-Cross-Site-Scripting.html
CVE: CVE-2018-17591
Published: 2018-10-02
Description: AirTies Air 5343v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149592/Airties-AIR5343v2-1.0.0.18-Cross-Site-Scripting.html; https://www.exploit-db.com/exploits/45525/; http://packetstormsecurity.com/files/149592/Airties-AIR5343v2-1.0.0.18-Cross-Site-Scripting.html
CVE: CVE-2018-17593
Published: 2018-10-02
Description: AirTies Air 5453 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149595/Airties-AIR5453-1.0.0.18-Cross-Site-Scripting.html; https://www.exploit-db.com/exploits/45525/; http://packetstormsecurity.com/files/149595/Airties-AIR5453-1.0.0.18-Cross-Site-Scripting.html
CVE: CVE-2018-17594
Published: 2018-10-02
Description: AirTies Air 5443v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149593/Airties-AIR5442-1.0.0.18-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/149593/Airties-AIR5442-1.0.0.18-Cross-Site-Scripting.html
CVE: CVE-2018-17595
Published: 2018-10-02
Description: In the 5.4.0 version of the Fork CMS software, HTML Injection and Stored XSS vulnerabilities were discovered via the /backend/ajax URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/149596/CVE-2018-17595.txt; https://packetstormsecurity.com/files/149596/CVE-2018-17595.txt
CVE: CVE-2018-17596
Published: 2018-10-02
Description: In Zoho ManageEngine AssetExplorer, a Stored XSS vulnerability was discovered in the 6.2.0 version via the /AssetDef.do ciName or assetName parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149597/ManageEngine-AssetExplorer-6.2.0-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/149597/ManageEngine-AssetExplorer-6.2.0-Cross-Site-Scripting.html
CVE: CVE-2018-17786
Published: 2018-10-02
Description: On D-Link DIR-823G devices, ExportSettings.sh, upload_settings.cgi, GetDownLoadSyslog.sh, and upload_firmware.cgi do not require authentication, which allows remote attackers to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://xz.aliyun.com/t/2834; https://xz.aliyun.com/t/2834
CVE: CVE-2018-17787
Published: 2018-10-02
Description: On D-Link DIR-823G devices, the GoAhead configuration allows /HNAP1 Command Injection via shell metacharacters in the POST data, because this data is sent directly to the "system" library function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://xz.aliyun.com/t/2834; https://xz.aliyun.com/t/2834
CVE: CVE-2018-17884
Published: 2018-10-02
Description: XSS exists in admin/gb-dashboard-widget.php in the Gwolle Guestbook (gwolle-gb) plugin before 2.5.4 for WordPress via the PATH_INFO to wp-admin/index.php
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.defensecode.com/advisories/DC-2018-05-008_WordPress_Gwolle_Guestbook_Plugin_Advisory.pdf; https://seclists.org/bugtraq/2018/Jul/74; https://wordpress.org/plugins/gwolle-gb/#developers
CVE: CVE-2018-17886
Published: 2018-10-02
Description: An issue was discovered in JEESNS 1.3. The XSS filter in com.lxinet.jeesns.core.utils.XssHttpServletRequestWrapper.java could be bypassed, as demonstrated by a <svg/onLoad=confirm substring. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-12429.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Jayl1n/CVE/blob/master/jeesns/jeesns-1.3-xss-filter-bypass.md; https://github.com/Jayl1n/CVE/blob/master/jeesns/jeesns-1.3-xss-filter-bypass.md
CVE: CVE-2018-11748
Published: 2018-10-02
Description: Previous releases of the Puppet device_manager module creates configuration files containing credentials that are world readable. This issue has been resolved as of device_manager 2.7.0.
CVSS Score: 7.8 (HIGH)
CWE: CWE-522
References: https://puppet.com/security/cve/CVE-2018-11748; https://puppet.com/security/cve/CVE-2018-11748
CVE: CVE-2018-11750
Published: 2018-10-02
Description: Previous releases of the Puppet cisco_ios module did not validate a host's identity before starting a SSH connection. As of the 0.4.0 release of cisco_ios, host key checking is enabled by default.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://puppet.com/security/cve/CVE-2018-11750; https://exchange.xforce.ibmcloud.com/vulnerabilities/150978; https://puppet.com/security/cve/CVE-2018-11750
CVE: CVE-2018-11752
Published: 2018-10-02
Description: Previous releases of the Puppet cisco_ios module output SSH session debug information including login credentials to a world readable file on every run. These issues have been resolved in the 0.4.0 release.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522
References: https://puppet.com/security/cve/CVE-2018-11752; https://puppet.com/security/cve/CVE-2018-11752
CVE: CVE-2018-9452
Published: 2018-10-02
Description: In getOffsetForHorizontal of Layout.java, there is a possible application hang due to a slow width calculation. This could lead to remote denial of service if a contact with many hidden unicode characters were sent to the device and used by a local app, with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-78464361
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/105484; https://android.googlesource.com/platform/frameworks/base/+/3b6f84b77c30ec0bab5147b0cffc192c86ba2634; https://android.googlesource.com/platform/frameworks/base/+/54f661b16b308cf38d1b[PII_REDACTED]c0f83df64d%2C
CVE: CVE-2018-9473
Published: 2018-10-02
Description: In ihevcd_parse_sei_payload of ihevcd_parse_headers.c, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0 Android ID: A-65484460
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-787
References: http://www.securityfocus.com/bid/105481; https://android.googlesource.com/platform/external/libhevc/+/9f0fb67540d2259e4930d9bd5f1a1a6fb95af862; https://source.android.com/security/bulletin/2018-10-01%2C
CVE: CVE-2018-9476
Published: 2018-10-02
Description: In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible use-after-free due to improper locking. This could lead to remote escalation of privilege in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android ID: A-109699112
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/105482; https://android.googlesource.com/platform/system/bt/+/dd28d8ddf2985d654781770c691c60b45d7f32b4; https://source.android.com/security/bulletin/2018-10-01%2C
CVE: CVE-2018-9490
Published: 2018-10-02
Description: In CollectValuesOrEntriesImpl of elements.cc, there is possible remote code execution due to type confusion. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111274046
CVSS Score: 7.8 (HIGH)
CWE: CWE-704
References: http://www.securityfocus.com/bid/105484; https://android.googlesource.com/platform/external/chromium-libpac/+/948d4753664cc4e6b33cc3de634ac8fd5f781382%2C; https://android.googlesource.com/platform/external/v8/+/a24543157ae2cdd25da43e20f4e48a07481e6ceb
CVE: CVE-2018-9491
Published: 2018-10-02
Description: In AMediaCodecCryptoInfo_new of NdkMediaCodec.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution in external apps with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111603051
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-787
References: http://www.securityfocus.com/bid/105484; https://android.googlesource.com/platform/frameworks/av/+/2b4667baa5a2badbdfec1794156ee17d4afef37c; https://source.android.com/security/bulletin/2018-10-01%2C
CVE: CVE-2018-9492
Published: 2018-10-02
Description: In checkGrantUriPermissionLocked of ActivityManagerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android-9.0 Android ID: A-111934948
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: http://www.securityfocus.com/bid/105484; https://android.googlesource.com/platform/frameworks/base/+/962fb40991f15be4f688d960aa00073683ebdd20; https://source.android.com/security/bulletin/2018-10-01%2C
CVE: CVE-2018-9493
Published: 2018-10-02
Description: In the content provider of the download manager, there is a possible SQL injection due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111085900
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: http://www.securityfocus.com/bid/105484; https://android.googlesource.com/platform/frameworks/base/+/462aaeaa616e0bb1342e8ef7b472acc0cbc93deb%2C; https://android.googlesource.com/platform/frameworks/base/+/ebc250d16c747f4161167b5ff58b3aea88b37acf
CVE: CVE-2018-9496
Published: 2018-10-02
Description: In ixheaacd_real_synth_fft_p3 of ixheaacd_esbr_fft.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-9.0 Android ID: A-110769924
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105481; https://android.googlesource.com/platform/external/libxaac/+/04e8cd58f075bec5892e369c8deebca9c67e855c; https://source.android.com/security/bulletin/2018-10-01%2C
CVE: CVE-2018-9497
Published: 2018-10-02
Description: In impeg2_fmt_conv_yuv420p_to_yuv420sp_uv_av8 of impeg2_format_conv.s there is a possible out of bounds write due to missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-74078669
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105481; https://android.googlesource.com/platform/external/libmpeg2/+/bef16671c891e16f25a7b174bc528eea109357be; https://source.android.com/security/bulletin/2018-10-01%2C
CVE: CVE-2018-9498
Published: 2018-10-02
Description: In SkSampler::Fill of SkSampler.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-78354855
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-787
References: http://www.securityfocus.com/bid/105481; https://android.googlesource.com/platform/external/skia/+/77c955200ddd1761d6ed7a6c1578349fedbb55e4; https://source.android.com/security/bulletin/2018-10-01%2C
CVE: CVE-2018-9499
Published: 2018-10-02
Description: In readVector of iCrypto.cpp, there is a possible invalid read due to uninitialized data. This could lead to local information disclosure from the DRM server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-79218474
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: http://www.securityfocus.com/bid/105481; https://android.googlesource.com/platform/frameworks/av/+/bf7a67c33c0f044abeef3b9746f434b7f3295bb1; https://source.android.com/security/bulletin/2018-10-01%2C
CVE: CVE-2018-9501
Published: 2018-10-02
Description: In the SetupWizard, there is a possible Factory Reset Protection bypass due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-110034419
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/105482; https://android.googlesource.com/platform/packages/apps/Settings/+/5e43341b8c7eddce88f79c9a[PII_REDACTED]c05b54; https://source.android.com/security/bulletin/2018-10-01%2C
CVE: CVE-2018-9502
Published: 2018-10-02
Description: In rfc_process_mx_message of rfc_ts_frames.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111936792
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105482; https://android.googlesource.com/platform/system/bt/+/92a7bf8c44a236607c146240f3c0adc1ae01fedf%2C; https://android.googlesource.com/platform/system/bt/+/9fe27a9b445f7e911286ed31c1087ceac567736b
CVE: CVE-2018-9503
Published: 2018-10-02
Description: In rfc_process_mx_message of rfc_ts_frames.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-80432928
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105482; https://android.googlesource.com/platform/system/bt/+/92a7bf8c44a236607c146240f3c0adc1ae01fedf%2C; https://android.googlesource.com/platform/system/bt/+/9fe27a9b445f7e911286ed31c1087ceac567736b
CVE: CVE-2018-9504
Published: 2018-10-02
Description: In sdp_copy_raw_data of sdp_discovery.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution over bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-110216176
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105482; https://android.googlesource.com/platform/system/bt/+/11fb7aa03437eccac98d90ca2de1730a02a515e2; https://source.android.com/security/bulletin/2018-10-01%2C
CVE: CVE-2018-9505
Published: 2018-10-02
Description: In mca_ccb_hdl_req of mca_cact.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-110791536
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105482; https://android.googlesource.com/platform/system/bt/+/5216e6120160b28d76e9ee4dff9995e772647511; https://source.android.com/security/bulletin/2018-10-01%2C
CVE: CVE-2018-9506
Published: 2018-10-02
Description: In avrc_msg_cback of avrc_api.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111803925
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105482; https://android.googlesource.com/platform/system/bt/+/830cb39cb2a0f1bf6704d264e2a5c5029c175dd7; https://source.android.com/security/bulletin/2018-10-01%2C
CVE: CVE-2018-9507
Published: 2018-10-02
Description: In bta_av_proc_meta_cmd of bta_av_act.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111893951
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105482; https://android.googlesource.com/platform/system/bt/+/30cec[PII_REDACTED]36ca0b[PII_REDACTED]e09bfe1a9; https://source.android.com/security/bulletin/2018-10-01%2C
CVE: CVE-2018-9508
Published: 2018-10-02
Description: In smp_process_keypress_notification of smp_act.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-111936834
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105482; https://android.googlesource.com/platform/system/bt/+/e8bbf5b0889790cf8616f4004867f0ff656f0551; https://source.android.com/security/bulletin/2018-10-01%2C
CVE: CVE-2018-9509
Published: 2018-10-02
Description: In smp_proc_master_id of smp_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111937027
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105482; https://android.googlesource.com/platform/system/bt/+/198888b8e0163bab7a417161c63e483804ae8e31; https://source.android.com/security/bulletin/2018-10-01%2C
CVE: CVE-2018-9510
Published: 2018-10-02
Description: In smp_proc_enc_info of smp_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111937065
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105482; https://android.googlesource.com/platform/system/bt/+/6e4b8e505173f803a5fc05abc09f64eef89dc308; https://source.android.com/security/bulletin/2018-10-01%2C
CVE: CVE-2018-9511
Published: 2018-10-02
Description: In ipSecSetEncapSocketOwner of XfrmController.cpp, there is a possible failure to initialize a security feature due to uninitialized data. This could lead to local denial of service of IPsec on sockets with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9.0 Android ID: A-111650288
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-909
References: http://www.securityfocus.com/bid/105482; https://android.googlesource.com/platform/system/netd/+/931418b16c7197ca2df34c2a5609e49791125abe; https://source.android.com/security/bulletin/2018-10-01%2C
CVE: CVE-2018-9513
Published: 2018-10-02
Description: In copy_process of fork.c, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-111081202 References: N/A
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: http://www.securityfocus.com/bid/105483; https://source.android.com/security/bulletin/2018-10-01; http://www.securityfocus.com/bid/105483