CVE-2017-13259
Last modified
CVE-2017-13259 is a vulnerability of currently unknown severity. In functionality implemented in sdp_discovery.cc, there are possible out of bounds reads due to missing bounds checks. This could lead to remote information disclosure with no additional execution privileges needed. EPSS estimates a 1.33% chance of exploitation in the next 30 days.
Description
In functionality implemented in sdp_discovery.cc, there are possible out of bounds reads due to missing bounds checks. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68161546.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Android | 5.1.1 | |
| Android | 6.0 | |
| Android | 6.0.1 | |
| Android | 7.0 | |
| Android | 7.1.1 | |
| Android | 7.1.2 | |
| Android | 8.0 | |
| Android | 8.1 |
References
- http://www.securityfocus.com/bid/103253Third Party Advisory, VDB Entry
- https://source.android.com/security/bulletin/2018-03-01Vendor Advisory
- http://www.securityfocus.com/bid/103253Third Party Advisory, VDB Entry
- https://source.android.com/security/bulletin/2018-03-01Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-13259?
How severe is CVE-2017-13259?
How do I fix CVE-2017-13259?
Are you affected by CVE-2017-13259?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST