CVE-2019-2181: Integer Overflow

Q: What is the vulnerability ID of this vulnerability?

The vulnerability ID is CVE-2019-2181.

Q: What is the severity of CVE-2019-2181?

The severity of CVE-2019-2181 is high with a severity value of 7.

Q: How does CVE-2019-2181 affect Android?

CVE-2019-2181 affects Android and could lead to local escalation of privilege.

Q: Is user interaction needed for exploitation of CVE-2019-2181?

Yes, user interaction is needed for exploitation of CVE-2019-2181.

Q: How can I fix CVE-2019-2181?

To fix CVE-2019-2181, it is recommended to update to the latest version of the affected software.

Published Sep 3, 2019

Updated

In bindertransaction of binder.c in the Android kernel, there is a po ...

Affected Software

13 affected componentsFixes available

Google Android

debian/linux

5.10.223-15.10.251-16.1.159-16.1.164-16.12.73-16.12.74-26.19.13-16.19.14-1

Google Android

ubuntu/linux*

ubuntu/linux-aws*

ubuntu/linux-azure*

ubuntu/linux-lts-xenial*

ubuntu/linux-azure<5.0.0-1023.24~18.04.1

5.0.0-1023.24~18.04.1

ubuntu/linux-gcp<5.0.0-1021.21~18.04.1

5.0.0-1021.21~18.04.1

ubuntu/linux-gke-5.0<5.0.0-1023.23~18.04.2

5.0.0-1023.23~18.04.2

ubuntu/linux-hwe<5.0.0-32.34~18.04.2

5.0.0-32.34~18.04.2

ubuntu/linux-oem-osp1<5.0.0-1025.28

5.0.0-1025.28

ubuntu/linux-hwe-edge*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 5.10.223-1Fixed in 5.10.251-1Fixed in 6.1.159-1Fixed in 6.1.164-1Fixed in 6.12.73-1Fixed in 6.12.74-2Fixed in 6.19.13-1Fixed in 6.19.14-1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.0.0-1023.24~18.04.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.0.0-1021.21~18.04.1
Upgrade
Upgrade ubuntu/linux-gke-5.0 to a version that resolves this vulnerability.
Fixed in 5.0.0-1023.23~18.04.2
Upgrade
Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.
Fixed in 5.0.0-32.34~18.04.2
Upgrade
Upgrade ubuntu/linux-oem-osp1 to a version that resolves this vulnerability.
Fixed in 5.0.0-1025.28

Event History

Sep 3, 2019

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Sep 5, 2019

CVE Published

via MITRE·09:43 PM

Data Sourced

via MITRE·09:43 PM

DescriptionWeakness

Data Sourced

via OSV·10:15 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the vulnerability ID of this vulnerability?

The vulnerability ID is CVE-2019-2181.

What is the severity of CVE-2019-2181?

The severity of CVE-2019-2181 is high with a severity value of 7.

How does CVE-2019-2181 affect Android?

CVE-2019-2181 affects Android and could lead to local escalation of privilege.

Is user interaction needed for exploitation of CVE-2019-2181?

Yes, user interaction is needed for exploitation of CVE-2019-2181.

How can I fix CVE-2019-2181?

To fix CVE-2019-2181, it is recommended to update to the latest version of the affected software.

CVE-2019-2181: Integer Overflow

Affected Software

Remediation

Event History

Frequently Asked Questions

What is the vulnerability ID of this vulnerability?

What is the severity of CVE-2019-2181?

How does CVE-2019-2181 affect Android?

Is user interaction needed for exploitation of CVE-2019-2181?

How can I fix CVE-2019-2181?

Company

Resources

Contact