CVE-2018-9511: Medium severity Google Android vulnerability
In ipSecSetEncapSocketOwner of XfrmController.cpp, there is a possible failure to initialize a security feature due to uninitialized data. This could lead to local denial of service of IPsec on sockets with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9.0 Android ID: A-111650288
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
Which Android versions are identified as affected?
The listed affected version is Android 9.0. No other Android versions are identified in the provided data.
What level of attacker access is required?
Exploitation is local and requires low privileges, as reflected by the CVSS vector. User interaction is not required, and the issue does not require additional execution privileges.
What is the expected impact of successful exploitation?
Successful exploitation can cause a denial of service affecting IPsec on sockets. The CVSS assessment indicates an availability impact only, with no listed confidentiality or integrity impact.
Is a fix available?
Yes. A patch is available for this issue.