CVE-2017-0561

Aliases:DEBIAN-CVE-2017-0561
Advisory lineage Upstream: 0 Downstream: 3
Modified
Published: 07 Apr 2017, 22:00
Last modified:05 Aug 2024, 13:11

Vulnerability Summary

Overall Risk (default)
critical
90/100
CVSS Score
10 HIGH
v2.0 (nvd)
EPSS Score
29.82% HIGH
30% probability -14.56%
KEV
Not listed
Ransomware
No reports
Public exploits
2 found
Dark Web
Not detected

Timeline

07 Apr 2017, 22:00
Published
Vulnerability first disclosed
05 Aug 2024, 13:11
Last Modified
Vulnerability information updated

Description

A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the context of the Wi-Fi SoC. This issue is rated as Critical due to the possibility of remote code execution in the context of the Wi-Fi SoC. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34199105. References: B-RB#110814.

CVSS Metrics

  • v3.0•CRITICAL•Score: 9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • v2.0•HIGH•Score: 10AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 29.82%• Percentile: 98%

Techniques & Countermeasures

  • CWE-787•Out-of-bounds Write

    The product writes data past the end, or before the beginning, of the intended buffer.

Affected Systems

  • debian•firmware-nonfree

    < 20180518-1 | < 20180518-1 | < 20180518-1 | < 20180518-1

  • google inc.•android

    Kernel-3.10 | Kernel-3.18

  • linux•linux_kernel

    3.10 | 3.18

References (7)