Vulnerability-Lookup

CNVD-2016-06196

Vulnerability from cnvd - Published: 2016-08-10

Title

Qualcomm Innovation Center Android contributions for MSM拒绝服务漏洞

Description

Qualcomm Innovation Center（QuIC）Android contributions for MSM是一款用于MSM项目支持用户建立基于Android平台并包含其他增强功能的高通芯片产品；TSC driver for the Linux kernel是一个用于Linux系统内核中的传输流控制器驱动。 QuIC Android contributions for MSM设备和其他产品中使用的TSC driver for the Linux kernel 3.x版本中drivers/media/platform/msm/broadcast/tsc.c文件存在拒绝服务漏洞。攻击者可借助调用TSC_GET_CARD_STATUS ioctl函数的应用程序利用该漏洞造成拒绝服务（无效的指针引用）。

Severity

中

Patch Name

Qualcomm Innovation Center Android contributions for MSM拒绝服务漏洞的补丁

Patch Description

Formal description

目前厂商已经发布了升级补丁以修复此安全问题，详情请关注厂商主页： https://www.kernel.org/

Reference

https://www.codeaurora.org/issues-tsc-tspp2-and-buspm-drivers-cve-2015-0573-cve-2016-2441-cve-2016-2442 https://us.codeaurora.org/cgit/quic/la//kernel/msm-3.10/commit/?id=e20f20aaed6b6d2fd1667bad9be9ef35103a51df

Impacted products

Name
Qualcomm Innovation Center Android contributions for MSM

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2015-0573"
    }
  },
  "description": "Qualcomm Innovation Center\uff08QuIC\uff09Android contributions for MSM\u662f\u4e00\u6b3e\u7528\u4e8eMSM\u9879\u76ee\u652f\u6301\u7528\u6237\u5efa\u7acb\u57fa\u4e8eAndroid\u5e73\u53f0\u5e76\u5305\u542b\u5176\u4ed6\u589e\u5f3a\u529f\u80fd\u7684\u9ad8\u901a\u82af\u7247\u4ea7\u54c1\uff1bTSC driver for the Linux kernel\u662f\u4e00\u4e2a\u7528\u4e8eLinux\u7cfb\u7edf\u5185\u6838\u4e2d\u7684\u4f20\u8f93\u6d41\u63a7\u5236\u5668\u9a71\u52a8\u3002\r\n\r\nQuIC Android contributions for MSM\u8bbe\u5907\u548c\u5176\u4ed6\u4ea7\u54c1\u4e2d\u4f7f\u7528\u7684TSC driver for the Linux kernel 3.x\u7248\u672c\u4e2ddrivers/media/platform/msm/broadcast/tsc.c\u6587\u4ef6\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u501f\u52a9\u8c03\u7528TSC_GET_CARD_STATUS ioctl\u51fd\u6570\u7684\u5e94\u7528\u7a0b\u5e8f\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08\u65e0\u6548\u7684\u6307\u9488\u5f15\u7528\uff09\u3002",
  "discovererName": "Chiachih Wu (@chiachih_wu) and Xuxian Jiang of C0RE Team",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u8be6\u60c5\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\uff1a \r\nhttps://www.kernel.org/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2016-06196",
  "openTime": "2016-08-10",
  "patchDescription": "Qualcomm Innovation Center\uff08QuIC\uff09Android contributions for MSM\u662f\u4e00\u6b3e\u7528\u4e8eMSM\u9879\u76ee\u652f\u6301\u7528\u6237\u5efa\u7acb\u57fa\u4e8eAndroid\u5e73\u53f0\u5e76\u5305\u542b\u5176\u4ed6\u589e\u5f3a\u529f\u80fd\u7684\u9ad8\u901a\u82af\u7247\u4ea7\u54c1\uff1bTSC driver for the Linux kernel\u662f\u4e00\u4e2a\u7528\u4e8eLinux\u7cfb\u7edf\u5185\u6838\u4e2d\u7684\u4f20\u8f93\u6d41\u63a7\u5236\u5668\u9a71\u52a8\u3002\r\n\r\nQuIC Android contributions for MSM\u8bbe\u5907\u548c\u5176\u4ed6\u4ea7\u54c1\u4e2d\u4f7f\u7528\u7684TSC driver for the Linux kernel 3.x\u7248\u672c\u4e2ddrivers/media/platform/msm/broadcast/tsc.c\u6587\u4ef6\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u501f\u52a9\u8c03\u7528TSC_GET_CARD_STATUS ioctl\u51fd\u6570\u7684\u5e94\u7528\u7a0b\u5e8f\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08\u65e0\u6548\u7684\u6307\u9488\u5f15\u7528\uff09\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Qualcomm Innovation Center Android contributions for MSM\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Qualcomm Innovation Center Android contributions for MSM"
  },
  "referenceLink": "https://www.codeaurora.org/issues-tsc-tspp2-and-buspm-drivers-cve-2015-0573-cve-2016-2441-cve-2016-2442 \r\nhttps://us.codeaurora.org/cgit/quic/la//kernel/msm-3.10/commit/?id=e20f20aaed6b6d2fd1667bad9be9ef35103a51df",
  "serverity": "\u4e2d",
  "submitTime": "2016-08-09",
  "title": "Qualcomm Innovation Center Android contributions for MSM\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"
}

CVE-2015-0573 (GCVE-0-2015-0573)

Vulnerability from cvelistv5 – Published: 2016-08-07 21:00 – Updated: 2024-08-06 04:17

Summary

drivers/media/platform/msm/broadcast/tsc.c in the TSC driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to cause a denial of service (invalid pointer dereference) or possibly have unspecified other impact via a crafted application that makes a TSC_GET_CARD_STATUS ioctl call.

Severity

No CVSS data available.

CWE

Assigner

mitre

References

2 references

URL	Tags
https://us.codeaurora.org/cgit/quic/la//kernel/ms…	x_refsource_CONFIRM
https://www.codeaurora.org/issues-tsc-tspp2-and-b…	x_refsource_CONFIRM

Date Public

2016-05-17 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T04:17:31.698Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://us.codeaurora.org/cgit/quic/la//kernel/msm-3.10/commit/?id=e20f20aaed6b6d2fd1667bad9be9ef35103a51df"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.codeaurora.org/issues-tsc-tspp2-and-buspm-drivers-cve-2015-0573-cve-2016-2441-cve-2016-2442"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "drivers/media/platform/msm/broadcast/tsc.c in the TSC driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to cause a denial of service (invalid pointer dereference) or possibly have unspecified other impact via a crafted application that makes a TSC_GET_CARD_STATUS ioctl call."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-08-07T21:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://us.codeaurora.org/cgit/quic/la//kernel/msm-3.10/commit/?id=e20f20aaed6b6d2fd1667bad9be9ef35103a51df"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.codeaurora.org/issues-tsc-tspp2-and-buspm-drivers-cve-2015-0573-cve-2016-2441-cve-2016-2442"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-0573",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "drivers/media/platform/msm/broadcast/tsc.c in the TSC driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to cause a denial of service (invalid pointer dereference) or possibly have unspecified other impact via a crafted application that makes a TSC_GET_CARD_STATUS ioctl call."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://us.codeaurora.org/cgit/quic/la//kernel/msm-3.10/commit/?id=e20f20aaed6b6d2fd1667bad9be9ef35103a51df",
              "refsource": "CONFIRM",
              "url": "https://us.codeaurora.org/cgit/quic/la//kernel/msm-3.10/commit/?id=e20f20aaed6b6d2fd1667bad9be9ef35103a51df"
            },
            {
              "name": "https://www.codeaurora.org/issues-tsc-tspp2-and-buspm-drivers-cve-2015-0573-cve-2016-2441-cve-2016-2442",
              "refsource": "CONFIRM",
              "url": "https://www.codeaurora.org/issues-tsc-tspp2-and-buspm-drivers-cve-2015-0573-cve-2016-2441-cve-2016-2442"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-0573",
    "datePublished": "2016-08-07T21:00:00.000Z",
    "dateReserved": "2015-01-07T00:00:00.000Z",
    "dateUpdated": "2024-08-06T04:17:31.698Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2016-06196

CVE-2015-0573 (GCVE-0-2015-0573)

Tags

Sightings

Nomenclature