CVE-2017-0554
First published: Mon Apr 03 2017(Updated: )
An elevation of privilege vulnerability in the Telephony component could enable a local malicious application to access capabilities outside of its permission levels. This issue is rated as Moderate because it could be used to gain access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33815946.
Credit: security@android.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Android | ||
| Android | =4.0 | |
| Android | =4.0.1 | |
| Android | =4.0.2 | |
| Android | =4.0.3 | |
| Android | =4.0.4 | |
| Android | =4.1 | |
| Android | =4.1.2 | |
| Android | =4.2 | |
| Android | =4.2.1 | |
| Android | =4.2.2 | |
| Android | =4.3 | |
| Android | =4.3.1 | |
| Android | =4.4 | |
| Android | =4.4.1 | |
| Android | =4.4.2 | |
| Android | =4.4.3 | |
| Android | =4.4.4 | |
| Android | =5.0 | |
| Android | =5.0.1 | |
| Android | =5.0.2 | |
| Android | =5.1 | |
| Android | =5.1.0 | |
| Android | =5.1.1 | |
| Android | =6.0 | |
| Android | =6.0.1 | |
| Android | =7.0 | |
| Android | =7.1.0 | |
| Android | =7.1.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://android.googlesource.com/platform/packages/services/Telephony/+/aeb795ef2290af1a0e4b14909363bc574e6b3ee7
- https://android.googlesource.com/platform/frameworks/base/+/3294256ba5b9e2ba2d8619d617e3d900e5386564
- https://source.android.com/docs/security/bulletin/2017-04-01 (Advisory)
- http://www.securityfocus.com/bid/97343
- http://www.securitytracker.com/id/1038201
- https://source.android.com/security/bulletin/2017-04-01
Frequently Asked Questions
What is the severity of CVE-2017-0554?
CVE-2017-0554 is rated as Moderate due to its potential for local elevation of privilege.
How do I fix CVE-2017-0554?
To fix CVE-2017-0554, update your Android device to the latest security patch provided by Google.
Which versions of Android are affected by CVE-2017-0554?
CVE-2017-0554 affects various versions of Android from 4.0 up to 7.1.1.
What impact does CVE-2017-0554 have on my Android device?
CVE-2017-0554 allows a local malicious application to gain access to elevated capabilities beyond its permission levels.
Is there a workaround for CVE-2017-0554?
Currently, the best practice is to apply the latest security updates as there are no official workarounds for CVE-2017-0554.
- agent/type
- agent/first-publish-date
- agent/severity
- agent/author
- agent/weakness
- agent/references
- agent/description
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/event
- agent/last-modified-date
- agent/source
- agent/tags
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/google
- canonical/android
- version/android/4.0
- version/android/4.0.1
- version/android/4.0.2
- version/android/4.0.3
- version/android/4.0.4
- version/android/4.1
- version/android/4.1.2
- version/android/4.2
- version/android/4.2.1
- version/android/4.2.2
- version/android/4.3
- version/android/4.3.1
- version/android/4.4
- version/android/4.4.1
- version/android/4.4.2
- version/android/4.4.3
- version/android/4.4.4
- version/android/5.0
- version/android/5.0.1
- version/android/5.0.2
- version/android/5.1
- version/android/5.1.0
- version/android/5.1.1
- version/android/6.0
- version/android/6.0.1
- version/android/7.0
- version/android/7.1.0
- version/android/7.1.1