1. Home
  2. Vulnerabilities
  3. CVE-2018-9568

CVE-2018-9568

CVSS v3.1 7.8 (High)
78% Progress
CVSS v2.0 7.2 (High)
72% Progress
EPSS 0.04 % (11th)
0.04% Progress
Affected Products 9
Advisories 27
Info CVSS EPSS Affected Configurations References Security Advisories Packages & Software OVAL Tools, Exploits & PoC Graph Web & Social Timeline

In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-113509306. References: Upstream kernel.

Weaknesses
CWE-704
Incorrect Type Conversion or Cast
CVE Status
PUBLISHED
CNA
Android (associated with Google Inc. or Open Handset Alliance)
Published Date
2018-12-06 14:29:01
(5 years ago)
Updated Date
2023-02-24 18:43:19
(19 months ago)

Affected Products

Canonical

Google

Linux

Redhat

Configuration #1

    CPE23 From Up To
  Google Android cpe:2.3:o:google:android:-

Configuration #2

    CPE23 From Up To
  Canonical Ubuntu Linux 12.04 cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm
  Canonical Ubuntu Linux 14.04 cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts

Configuration #3

    CPE23 From Up To
  Redhat Enterprise Linux Desktop 7.0 cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
  Redhat Enterprise Linux Server 7.0 cpe:2.3:o:redhat:enterprise_linux_server:7.0
  Redhat Enterprise Linux Server Aus 7.6 cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6
  Redhat Enterprise Linux Server Eus 7.6 cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6
  Redhat Enterprise Linux Server Tus 7.6 cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6
  Redhat Enterprise Linux Workstation 7.0 cpe:2.3:o:redhat:enterprise_linux_workstation:7.0

Configuration #4

    CPE23 From Up To
  Linux Kernel prior 3.10.108 version cpe:2.3:o:linux:linux_kernel < 3.10.108
  Linux Kernel from 3.11 version and prior 3.16.58 version cpe:2.3:o:linux:linux_kernel >= 3.11 < 3.16.58
  Linux Kernel from 3.17 version and prior 3.18.77 version cpe:2.3:o:linux:linux_kernel >= 3.17 < 3.18.77
  Linux Kernel from 3.19 version and prior 4.1.46 version cpe:2.3:o:linux:linux_kernel >= 3.19 < 4.1.46
  Linux Kernel from 4.2 version and prior 4.4.94 version cpe:2.3:o:linux:linux_kernel >= 4.2 < 4.4.94
  Linux Kernel from 4.5 version and prior 4.9.55 version cpe:2.3:o:linux:linux_kernel >= 4.5 < 4.9.55
  Linux Kernel from 4.10 version and prior 4.13.6 version cpe:2.3:o:linux:linux_kernel >= 4.10 < 4.13.6