CVE-2020-0009

 

Published at: - 08-01-2020 05:15

Last modified: - 14-10-2022 04:33

Total changes: - 2

Description

In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to local escalation of privilege by corrupting memory shared between processes, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-142938932

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

 

Verification logic

 

Reference

• http://packetstormsecurity.com/files/155903/Android-ashmem-Read-Only-Bypasses.html
• https://source.android.com/security/bulletin/2020-01-01
• [debian-lts-announce] 20200609 [SECURITY] [DLA 2241-1] linux security update-Mailing List, Third Party Advisory
• [debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update-Mailing List, Third Party Advisory

 

Keywords

NVD

 

CVE-2020-0009

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures