CVE-2018-9511 · CVEKit

cve.orgen

361 chars

In ipSecSetEncapSocketOwner of XfrmController.cpp, there is a possible failure to initialize a security feature due to uninitialized data. This could lead to local denial of service of IPsec on sockets with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9.0 Android ID: A-111650288

NVDen

361 chars

In ipSecSetEncapSocketOwner of XfrmController.cpp, there is a possible failure to initialize a security feature due to uninitialized data. This could lead to local denial of service of IPsec on sockets with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9.0 Android ID: A-111650288

NVDes

412 chars

En ipSecSetEncapSocketOwner en XfrmController.cpp, hay un posible error a la hora de inicializar una característica de seguridad debido a datos no inicializados. Esto podría llevar a una denegación de servicio local de IPsec en sockets sin necesitar privilegios de ejecución adicionales. No se necesita interacción del usuario para explotarlo. Producto: Versiones de Android: Android-9.0. Android ID: A-111650288

CVSS metrics across sources

2

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.9	3.9	6.9	AV:L/AC:L/Au:N/C:N/I:N/A:C
3.0	Primary	NVD	5.5	1.8	3.6	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H