CVE-2018-5852

EPSS 0.12%
Veröffentlicht 26.11.2024 14:15:17
Zuletzt bearbeitet 09.01.2025 19:53:39
Erkennungen
Login

Buffer Over-read in IPA

An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat'

Betroffene Produkte Warnungen 0 Metriken 3 CWE 2 Referenzen 4

NVD 23 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Mdm9206 Firmware Version -

Qualcomm ≫ Mdm9206 Version -

Qualcomm ≫ Mdm9607 Firmware Version -

Qualcomm ≫ Mdm9607 Version -

Qualcomm ≫ Mdm9640 Firmware Version -

Qualcomm ≫ Mdm9640 Version -

Qualcomm ≫ Mdm9650 Firmware Version -

Qualcomm ≫ Mdm9650 Version -

Qualcomm ≫ Msm8909w Firmware Version -

Qualcomm ≫ Msm8909w Version -

Qualcomm ≫ Sd 210 Firmware Version -

Qualcomm ≫ Sd 210 Version -

Qualcomm ≫ Sd 212 Firmware Version -

Qualcomm ≫ Sd 212 Version -

Qualcomm ≫ Sd 205 Firmware Version -

Qualcomm ≫ Sd 205 Version -

Qualcomm ≫ Sd 425 Firmware Version -

Qualcomm ≫ Sd 425 Version -

Qualcomm ≫ Sd 430 Firmware Version -

Qualcomm ≫ Sd 430 Version -

Qualcomm ≫ Sd 450 Firmware Version -

Qualcomm ≫ Sd 450 Version -

Qualcomm ≫ Sd 615 Firmware Version -

Qualcomm ≫ Sd 615 Version -

Qualcomm ≫ Sd 616 Firmware Version -

Qualcomm ≫ Sd 616 Version -

Qualcomm ≫ Sd 415 Firmware Version -

Qualcomm ≫ Sd 415 Version -

Qualcomm ≫ Sd 617 Firmware Version -

Qualcomm ≫ Sd 617 Version -

Qualcomm ≫ Sd 625 Firmware Version -

Qualcomm ≫ Sd 625 Version -

Qualcomm ≫ Sd 650 Firmware Version -

Qualcomm ≫ Sd 650 Version -

Qualcomm ≫ Sd 652 Firmware Version -

Qualcomm ≫ Sd 652 Version -

Qualcomm ≫ Sd 810 Firmware Version -

Qualcomm ≫ Sd 810 Version -

Qualcomm ≫ Sd 820 Firmware Version -

Qualcomm ≫ Sd 820 Version -

Qualcomm ≫ Sd 820a Firmware Version -

Qualcomm ≫ Sd 820a Version -

Qualcomm ≫ Sd 835 Firmware Version -

Qualcomm ≫ Sd 835 Version -

Qualcomm ≫ Sd 845 Firmware Version -

Qualcomm ≫ Sd 845 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.12%	0.018

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Qualcomm	8.4	2.5	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-126 Buffer Over-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

CWE-191 Integer Underflow (Wrap or Wraparound)

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-5852

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-5852

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-5852

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2018-5852