Details of VAR-201905-0756

ID

VAR-201905-0756

CVE

CVE-2018-11953

TITLE

plural Snapdragon Product out-of-bounds vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2018-015503

DESCRIPTION

While processing ssid IE length from remote AP, possible out-of-bounds access may occur due to crafted ssid IE length in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 650/52, SD 820, SD 820A, SDM439, SDX20. plural Snapdragon The product contains an out-of-bounds vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Google Android is prone to the following security vulnerabilities: 1. Multiple buffer-overflow vulnerabilities 2. Multiple information-disclosure vulnerabilities 3. Multiple security-bypass vulnerabilities 4. Multiple security vulnerabilities 5. Multiple integer overflow vulnerabilities An attacker can exploit these issues to bypass certain security restrictions and to perform unauthorized actions, gain elevated privileges, obtain sensitive information or execute arbitrary code. Failed exploits may result in a denial-of-service condition. These issues are being tracked by Android Bug IDs A-79377832, A-72957385, A-109741680, A-77527719, A-109741946, A-111127853, A-111128575, A-111126050, A-111125792, A-111128301, A-111128420, A-111128838, A-111128797, A-111128421, A-111128578, A-111127989, A-111128877, A-111128841, A-111126532, A-112277221, A-112276863, A-112278150, A-112277910, A-112277186, A-112278861, A-112277891, A-112278405, A-112277852, A-120487136*

Trust: 2.07

sources: NVD: CVE-2018-11953 // JVNDB: JVNDB-2018-015503 // BID: 107770 // VULHUB: VHN-121864 // VULMON: CVE-2018-11953

AFFECTED PRODUCTS

vendor:	qualcomm	model:	sd 632	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9379	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8996au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 415	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 205	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 212	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 650	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 652	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 425	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 820a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 429	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9607	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9377	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9650	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 615	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9206	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6574au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6174a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qm215	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 450	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 616	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9640	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9150	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 820	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8909w	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdm439	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 439	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdx20	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 210	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 625	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9150	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	mdm9206	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	mdm9607	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	mdm9640	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	mdm9650	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	msm8909w	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	msm8996au	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	qca6174a	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	qca6574au	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	qca9377	scope:	-	version:	-	Trust: 0.8
vendor:	google	model:	android	scope:	eq	version:	0	Trust: 0.3

sources: BID: 107770 // JVNDB: JVNDB-2018-015503 // NVD: CVE-2018-11953

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2018-11953
value:	CRITICAL
Trust: 1.0
NVD:	CVE-2018-11953
value:	CRITICAL
Trust: 0.8
CNNVD:	CNNVD-201904-079
value:	CRITICAL
Trust: 0.6
VULHUB:	VHN-121864
value:	HIGH
Trust: 0.1
VULMON:	CVE-2018-11953
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2018-11953
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.9
VULHUB:	VHN-121864
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2018-11953
baseSeverity:	CRITICAL
baseScore:	9.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	5.9
version:	3.0
Trust: 1.8

sources: VULHUB: VHN-121864 // VULMON: CVE-2018-11953 // JVNDB: JVNDB-2018-015503 // CNNVD: CNNVD-201904-079 // NVD: CVE-2018-11953

PROBLEMTYPE DATA

problemtype:

CWE-125

Trust: 1.9

sources: VULHUB: VHN-121864 // JVNDB: JVNDB-2018-015503 // NVD: CVE-2018-11953

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201904-079

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-201904-079

CONFIGURATIONS

sources: JVNDB: JVNDB-2018-015503

PATCH

title:	April 2019 Code Aurora Security Bulletin	url:	https://www.codeaurora.org/security-bulletin/2019/04/01/april-2019-code-aurora-security-bulletin	Trust: 0.8
title:	Android WLAN HOST Fixes for component security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=91003	Trust: 0.6
title:	Android Security Bulletins: Android Security Bulletin—April 2019	url:	https://vulmon.com/vendoradvisory?qidtp=android_security_bulletins&qid=cd95df8ce79ebdc8577685322caeeedf	Trust: 0.1

sources: VULMON: CVE-2018-11953 // JVNDB: JVNDB-2018-015503 // CNNVD: CNNVD-201904-079

EXTERNAL IDS

db:	NVD	id:	CVE-2018-11953	Trust: 2.9
db:	BID	id:	107770	Trust: 1.0
db:	JVNDB	id:	JVNDB-2018-015503	Trust: 0.8
db:	CNNVD	id:	CNNVD-201904-079	Trust: 0.6
db:	VULHUB	id:	VHN-121864	Trust: 0.1
db:	VULMON	id:	CVE-2018-11953	Trust: 0.1

sources: VULHUB: VHN-121864 // VULMON: CVE-2018-11953 // BID: 107770 // JVNDB: JVNDB-2018-015503 // CNNVD: CNNVD-201904-079 // NVD: CVE-2018-11953

REFERENCES

url:	https://www.codeaurora.org/security-bulletin/2019/04/01/april-2019-code-aurora-security-bulletin	Trust: 1.8
url:	https://nvd.nist.gov/vuln/detail/cve-2018-11953	Trust: 1.4
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-11953	Trust: 0.8
url:	http://www.securityfocus.com/bid/107770	Trust: 0.7
url:	https://vigilance.fr/vulnerability/google-android-pixel-multiple-vulnerabilities-of-april-2019-28925	Trust: 0.6
url:	https://source.android.com/security/bulletin/2019-04-01.html	Trust: 0.4
url:	http://code.google.com/android/	Trust: 0.3
url:	https://cwe.mitre.org/data/definitions/125.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: VULHUB: VHN-121864 // VULMON: CVE-2018-11953 // BID: 107770 // JVNDB: JVNDB-2018-015503 // CNNVD: CNNVD-201904-079 // NVD: CVE-2018-11953

CREDITS

The vendor reported this issue.

Trust: 0.3

sources: BID: 107770

SOURCES

db:	VULHUB	id:	VHN-121864
db:	VULMON	id:	CVE-2018-11953
db:	BID	id:	107770
db:	JVNDB	id:	JVNDB-2018-015503
db:	CNNVD	id:	CNNVD-201904-079
db:	NVD	id:	CVE-2018-11953

LAST UPDATE DATE

2024-11-23T21:38:23.291000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-121864	date:	2019-05-29T00:00:00
db:	VULMON	id:	CVE-2018-11953	date:	2019-05-29T00:00:00
db:	BID	id:	107770	date:	2019-04-01T00:00:00
db:	JVNDB	id:	JVNDB-2018-015503	date:	2019-06-10T00:00:00
db:	CNNVD	id:	CNNVD-201904-079	date:	2019-05-29T00:00:00
db:	NVD	id:	CVE-2018-11953	date:	2024-11-21T03:44:19.180

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-121864	date:	2019-05-24T00:00:00
db:	VULMON	id:	CVE-2018-11953	date:	2019-05-24T00:00:00
db:	BID	id:	107770	date:	2019-04-01T00:00:00
db:	JVNDB	id:	JVNDB-2018-015503	date:	2019-06-10T00:00:00
db:	CNNVD	id:	CNNVD-201904-079	date:	2019-04-02T00:00:00
db:	NVD	id:	CVE-2018-11953	date:	2019-05-24T17:29:01.570