CVE-2017-13259
First published: Mon Mar 05 2018(Updated: )
In functionality implemented in sdp_discovery.cc, there are possible out of bounds reads due to missing bounds checks. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68161546.
Credit: security@android.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Android | =5.1.1 | |
| Google Android | =6.0 | |
| Google Android | =6.0.1 | |
| Google Android | =7.0 | |
| Google Android | =7.1.1 | |
| Google Android | =7.1.2 | |
| Google Android | =8.0 | |
| Google Android | =8.1 | |
| Google Android |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/103253
- https://source.android.com/security/bulletin/2018-03-01
- https://android.googlesource.com/platform/system/bt/+/0627e76edefd948dc3efe11564d7e53d56aac80c
- https://android.googlesource.com/platform/system/bt/+/1313abd1761c39e8619a77964f8c42e3e72b5fee
- https://source.android.com/docs/security/bulletin/2018-03-01 (Advisory)
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/severity
- agent/author
- agent/weakness
- agent/references
- agent/tags
- agent/event
- agent/description
- collector/mitre-cve
- source/MITRE
- vendor/google
- canonical/google android
- version/google android/5.1.1
- version/google android/6.0
- version/google android/6.0.1
- version/google android/7.0
- version/google android/7.1.1
- version/google android/7.1.2
- version/google android/8.0
- version/google android/8.1