DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Google Android: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2016-07-06
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen, um seine Rechte zu erweitern, um einen Denial of Service Zustand herbeizuführen und um Informationen offenzulegen.
01
beschreibt (108)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2016-3818US | medium5.5 | — | ||
libc in Android 4.x before 4.4.4 allows remote attackers to cause a denial of service (device hang or reboot) via a crafted file, aka internal bug 28740702. | ||||
| CVE-2016-3816US | medium5.5 | — | ||
The MediaTek display driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug… | ||||
| CVE-2016-3815US | medium5.5 | — | ||
The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 285222… | ||||
| CVE-2016-3814US | medium5.5 | — | ||
The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 281933… | ||||
| CVE-2016-3813US | medium5.5 | — | ||
The Qualcomm USB driver in Android before 2016-07-05 on Nexus 5, 5X, 6, and 6P devices allows attackers to obtain sensitive information via a crafted application, aka Android inter… | ||||
| CVE-2016-3812US | medium5.5 | — | ||
The MediaTek video codec driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive information via a crafted application, aka Android internal… | ||||
| CVE-2016-3811US | high7.8 | — | ||
The kernel video driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 28447556. | ||||
| CVE-2016-3810US | medium5.5 | — | ||
The MediaTek Wi-Fi driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 2… | ||||
| CVE-2016-3809US | medium5.5 | — | ||
The networking component in Android before 2016-07-05 on Android One, Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, Nexus 7 (2013), Nexus 9, Nexus Player, and Pixel C devices allows attack… | ||||
| CVE-2016-3808US | high7.8 | — | ||
The serial peripheral interface driver in Android before 2016-07-05 on Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28430009. | ||||
| CVE-2016-3807US | high7.8 | — | ||
The serial peripheral interface driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 28402… | ||||
| CVE-2016-3806US | high7.8 | — | ||
The MediaTek display driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28402341 and… | ||||
| CVE-2016-3805US | high7.8 | — | ||
The MediaTek power management driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 283… | ||||
| CVE-2016-3804US | high7.8 | — | ||
The MediaTek power management driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 283… | ||||
| CVE-2016-3803US | high7.8 | — | ||
The kernel filesystem implementation in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 2858843… | ||||
| CVE-2016-3802US | high7.8 | — | ||
The kernel filesystem implementation in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 28271368. | ||||
| CVE-2016-3801US | high7.8 | — | ||
The MediaTek GPS driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28174914 and Med… | ||||
| CVE-2016-3800US | high7.8 | — | ||
The MediaTek video driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28175027 and M… | ||||
| CVE-2016-3799US | high7.8 | — | ||
The MediaTek video driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28175025 and M… | ||||
| CVE-2016-3798US | high7.8 | — | ||
The MediaTek hardware sensor driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 2817… | ||||
20 von 108 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- BlackBerry powered by Android Security Bulletin - July 2016 vom 2016-07-06external
- Red Hat Security Advisory RHSA-2017:0193 vom 2017-01-26external
- Red Hat Security Advisory RHSA-2017:0194 vom 2017-01-26external
- SUSE Security Update SUSE-SU-2016:1994-1 vom 2016-08-09external
- SUSE Security Update SUSE-SU-2016:1995-1 vom 2016-08-09external
- SUSE Security Update SUSE-SU-2016:2001-1 vom 2016-08-09external
- SUSE Security Update SUSE-SU-2016:2002-1 vom 2016-08-09external
- SUSE Security Update SUSE-SU-2016:2005-1 vom 2016-08-09external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan