CVE-2019-2215

Android Kernel Use-After-Free Vulnerability

Android

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095

11. Okt 2019

Ausgewertete Quellen

• Android
  https://source.android.com/security/bulletin/2019-10-01
• Debian
  https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html
• Debian
  https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
• Ubuntu
  https://usn.ubuntu.com/4186-1/
• Hinweis
  http://packetstormsecurity.com/files/154911/Android-Binder-Use-After-Free.html
• Hinweis
  http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
• Hinweis
  http://packetstormsecurity.com/files/156495/Android-Binder-Use-After-Free.html
• Hinweis
  http://seclists.org/fulldisclosure/2019/Oct/38
• Hinweis
  http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191030-01-binder-en
• Hinweis
  https://seclists.org/bugtraq/2019/Nov/11
• Hinweis
  https://security.netapp.com/advisory/ntap-20191031-0005/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-2215
• CISA
  Android Kernel Use-After-Free Vulnerability
• NVD
  CVE-2019-2215