CVE-2017-6899
Last modified
CVE-2017-6899 is a vulnerability of currently unknown severity. The msm_bus_dbg_update_request_write function in drivers/platform/msm/msm_bus/msm_bus_dbg.c in android_kernel_huawei_msm8916 through 2017-06-16 in LineageOS, and possibly other kernels for MSM devices, allows attackers to cause a denial of service (NULL pointer dereference and device crash) via a crafted /sys/kernel/debug/msm-bus-dbg/client-data/update-request write request.. EPSS estimates a 0.35% chance of exploitation in the next 30 days.
Description
The msm_bus_dbg_update_request_write function in drivers/platform/msm/msm_bus/msm_bus_dbg.c in android_kernel_huawei_msm8916 through 2017-06-16 in LineageOS, and possibly other kernels for MSM devices, allows attackers to cause a denial of service (NULL pointer dereference and device crash) via a crafted /sys/kernel/debug/msm-bus-dbg/client-data/update-request write request.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Lineageos | Lineageos | <= 2017-06-16 |
References
- http://blog.secret-team.cn/index.php/archives/5/Third Party Advisory
- http://www.securityfocus.com/bid/99107Third Party Advisory, VDB Entry
- http://blog.secret-team.cn/index.php/archives/5/Third Party Advisory
- http://www.securityfocus.com/bid/99107Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-6899?
How severe is CVE-2017-6899?
How do I fix CVE-2017-6899?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-6890A boundary error within the "foveon_load_camf()" function (d…
- CVE-2017-6891Two errors in the "asn1_find_node()" function (lib/parser_au…8.8
- CVE-2017-6892In libsndfile version 1.0.28, an error in the "aiff_read_cha…
- CVE-2017-6894A vulnerability exists in FlexNet Manager Suite releases 201…7.8
- CVE-2017-6895USB Pratirodh allows remote attackers to conduct XML Externa…
- CVE-2017-6896Privilege escalation vulnerability on the DIGISOL DG-HR1400 …
- CVE-2017-6900An issue was discovered in Riello NetMan 204 14-2 and 15-2. …
- CVE-2017-6902Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2017-6903In ioquake3 before 2017-03-14, the auto-downloading feature …
- CVE-2017-6905An issue was discovered in concrete5 <= 5.6.3.4. The vulnera…
- CVE-2017-6906An issue was discovered in SiberianCMS before 4.10.0. The v…
- CVE-2017-6907An issue was discovered in Open.GL before 2017-03-13. The vu…
Are you affected by CVE-2017-6899?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
