CVE-2017-0786: High severity Google Android vulnerability

Q: What is the severity of CVE-2017-0786?

CVE-2017-0786 has been rated as a high severity vulnerability due to its potential for elevation of privilege.

Q: How do I fix CVE-2017-0786?

To fix CVE-2017-0786, update your Android device to the latest security patch that addresses this vulnerability.

Q: Which versions of Android are affected by CVE-2017-0786?

CVE-2017-0786 affects Android versions up to 7.1.2.

Q: What type of vulnerability is CVE-2017-0786?

CVE-2017-0786 is an elevation of privilege vulnerability in the Broadcom wi-fi driver.

Q: What products are impacted by CVE-2017-0786?

CVE-2017-0786 impacts devices running the Android operating system, particularly those with the affected Broadcom wi-fi driver.

Published Sep 5, 2017

Updated

A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37351060. References: B-V2017060101.

Affected Software

32 affected componentsFixes available

Google Android=7.1.2

Google Android

ubuntu/linux-aws<4.4.0-1003.3

4.4.0-1003.3

ubuntu/linux-lts-xenial<4.4.0-101.124~14.04.1

4.4.0-101.124~14.04.1

ubuntu/linux*

ubuntu/linux<4.4.0-101.124

4.4.0-101.124

ubuntu/linux-aws<4.4.0-1041.50

4.4.0-1041.50

ubuntu/linux-azure<4.13.0-1005.7

4.13.0-1005.7

ubuntu/linux-gcp<4.13.0-1002.5

4.13.0-1002.5

ubuntu/linux-hwe<4.13.0-32.35~16.04.1

4.13.0-32.35~16.04.1

ubuntu/linux-kvm<4.4.0-1010.15

4.4.0-1010.15

ubuntu/linux-raspi2<4.4.0-1077.85

4.4.0-1077.85

ubuntu/linux-snapdragon<4.4.0-1079.84

4.4.0-1079.84

ubuntu/linux-hwe-edge*

ubuntu/linux-aws-5.0*

ubuntu/linux-azure*

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-edge*

ubuntu/linux-oracle-5.0*

ubuntu/linux-azure-fde*

ubuntu/linux-azure-fde-5.15*

ubuntu/linux-gke*

ubuntu/linux-raspi2*

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-azure-6.11*

ubuntu/linux-gcp-6.11*

ubuntu/linux-hwe-6.11*

ubuntu/linux-lowlatency-hwe-6.11*

ubuntu/linux-raspi-realtime*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1003.3
Upgrade
Upgrade ubuntu/linux-lts-xenial to a version that resolves this vulnerability.
Fixed in 4.4.0-101.124~14.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.4.0-101.124
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1041.50
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.13.0-1005.7
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 4.13.0-1002.5
Upgrade
Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.
Fixed in 4.13.0-32.35~16.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.4.0-1010.15
Upgrade
Upgrade ubuntu/linux-raspi2 to a version that resolves this vulnerability.
Fixed in 4.4.0-1077.85
Upgrade
Upgrade ubuntu/linux-snapdragon to a version that resolves this vulnerability.
Fixed in 4.4.0-1079.84

Event History

Sep 5, 2017

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Sep 8, 2017

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

DescriptionWeakness

Data Sourced

via OSV·08:29 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2017-0786?

CVE-2017-0786 has been rated as a high severity vulnerability due to its potential for elevation of privilege.

How do I fix CVE-2017-0786?

To fix CVE-2017-0786, update your Android device to the latest security patch that addresses this vulnerability.

Which versions of Android are affected by CVE-2017-0786?

CVE-2017-0786 affects Android versions up to 7.1.2.

What type of vulnerability is CVE-2017-0786?

CVE-2017-0786 is an elevation of privilege vulnerability in the Broadcom wi-fi driver.

What products are impacted by CVE-2017-0786?

CVE-2017-0786 impacts devices running the Android operating system, particularly those with the affected Broadcom wi-fi driver.

CVE-2017-0786: High severity Google Android vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

What is the severity of CVE-2017-0786?

How do I fix CVE-2017-0786?

Which versions of Android are affected by CVE-2017-0786?

What type of vulnerability is CVE-2017-0786?

What products are impacted by CVE-2017-0786?

Company

Resources

Contact