First published: Mon Mar 06 2017(Updated: )
A denial of service vulnerability in Setup Wizard could allow a local malicious application to temporarily block access to an affected device. This issue is rated as Moderate because it may require a factory reset to repair the device. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1. Android ID: A-31554152.
Credit: security@android.com
Affected Software | Affected Version | How to fix |
---|---|---|
Android | ||
Android | =5.0 | |
Android | =5.0.1 | |
Android | =5.0.2 | |
Android | =5.1 | |
Android | =5.1.0 | |
Android | =5.1.1 | |
Android | =6.0 | |
Android | =6.0.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-0496 is rated as Moderate due to its potential to cause a denial of service that might require a factory reset to restore the device.
To fix CVE-2017-0496, users should update their Android devices to a version that is not affected by this vulnerability.
CVE-2017-0496 affects Android versions 5.0.2, 5.1.1, 6.0, and 6.0.1.
CVE-2017-0496 can temporarily block access to your device if exploited by a local malicious application.
Mitigation for CVE-2017-0496 includes avoiding installing untrusted applications and keeping your device updated with the latest security patches.