CVE-2018-9362

Description

In processMessagePart of InboundSmsHandler.java, there is a possible remote denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-72298611.

Scores

Faiblesses (CWE)

• CWE-20

Références européennes

• ENISA EUVD · EUVD-2018-20956
• GCVE · GCVE-0-2018-9362

Avis du CERT-FR

• CERTFR-2018-AVI-267 — Multiples vulnérabilités dans Google Android · cert.ssi.gouv.fr

Configurations affectées (CPE NVD)

• cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*
• cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*
• cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*
• cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*
• cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*
• cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*
• cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*

Produits affectés

Références

• https://source.android.com/security/bulletin/2018-06-01
• http://www.securityfocus.com/bid/104461

Sources