CVE-2017-0786

Description

A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37351060. References: B-V2017060101.

CVSS Metrics

• v3.0•HIGH•Score: 8.8CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
• v2.0•MEDIUM•Score: 5.8AV:A/AC:L/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 0.44%• Percentile: 38%

Affected Systems

• debian•linux

  < 4.13.4-2 | < 4.13.4-2 | < 4.13.4-2 | < 4.13.4-2

• ubuntu•linux

  all | < 4.4.0-101.124

• ubuntu•linux-aws

  < 4.4.0-1003.3 | < 4.4.0-1041.50

• ubuntu•linux-aws-5.0

  all

• ubuntu•linux-azure

  < 4.13.0-1005.7 | all

• ubuntu•linux-azure-6.11

  all

• ubuntu•linux-azure-edge

  all

• ubuntu•linux-azure-fde

  all

• ubuntu•linux-azure-fde-5.15

  all

• ubuntu•linux-gcp

  < 4.13.0-1002.5 | all

• ubuntu•linux-gcp-6.11

  all

• ubuntu•linux-gcp-edge

  all

• ubuntu•linux-gke

  all

• ubuntu•linux-hwe

  < 4.13.0-32.35~16.04.1

• ubuntu•linux-hwe-6.11

  all

• ubuntu•linux-hwe-edge

  all

• ubuntu•linux-intel-iot-realtime

  all

• ubuntu•linux-kvm

  < 4.4.0-1010.15

• ubuntu•linux-lowlatency-hwe-6.11

  all

• ubuntu•linux-lts-xenial

  < 4.4.0-101.124~14.04.1

• ubuntu•linux-oracle-5.0

  all

• ubuntu•linux-raspi-realtime

  all

• ubuntu•linux-raspi2

  < 4.4.0-1077.85 | all

• ubuntu•linux-realtime

  all

• ubuntu•linux-riscv

  all

• ubuntu•linux-snapdragon

  < 4.4.0-1079.84

• google inc.•android

  Android kernel

• google•android

  7.1.2

References (5)

• https://source.android.com/security/bulletin/2017-09-01
• http://www.securityfocus.com/bid/100655
• https://ubuntu.com/security/CVE-2017-0786
• https://www.cve.org/CVERecord?id=CVE-2017-0786
• https://security-tracker.debian.org/tracker/CVE-2017-0786