VDB
CVE-2022-20361
CVE-2022-20361
PUBLISHED
In Google Android existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten Framework, Media Framework, System, Google Play System-Updates, Kernel-Komponenten, Imagination Technologies, MediaTek-Komponenten, Unisoc-Komponenten, Qualcomm-Komponenten, Qualcomm Closed-Source-Komponenten und Pixel. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen und beliebigen Code auszuführen. Um die Schwachstelle erfolgreich auszunutzen, ist eine Benutzeraktion erforderlich, z. B. die Nutzung bösartiger Apps oder Websites.
EPSS 1.48% · 81.4th percentile
Risk Scores
EPSS Score
1.48%
81.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Amazon | Amazon Linux 2 | |
| Google Android 12L | ||
| Red Hat | Red Hat Enterprise Linux | |
| Google Android 10 | ||
| Google Android 11 | ||
| Ubuntu | Ubuntu Linux | |
| Google Android 12 | ||
| SUSE | SUSE Linux |
Exploit Intelligence
- BLURtooth: Exploiting Cross-Transport Key Derivation in Bluetooth Classic and Bluetooth Low Energy [CVE-2020-15802] [CVE-2022-20361] (github-poc-repo)
- BLURtooth: Exploiting Cross-Transport Key Derivation in Bluetooth Classic and Bluetooth Low Energy [CVE-2020-15802] [CVE-2022-20361] (github-poc-repo)
- BLURtooth: Exploiting Cross-Transport Key Derivation in Bluetooth Classic and Bluetooth Low Energy [CVE-2020-15802] [CVE-2022-20361] (github-poc-repo)
- BLURtooth: Exploiting Cross-Transport Key Derivation in Bluetooth Classic and Bluetooth Low Energy [CVE-2020-15802] [CVE-2022-20361] (github-poc-repo)
- BLURtooth: Exploiting Cross-Transport Key Derivation in Bluetooth Classic and Bluetooth Low Energy [CVE-2020-15802] [CVE-2022-20361] (github-poc-repo)
- BLURtooth: Exploiting Cross-Transport Key Derivation in Bluetooth Classic and Bluetooth Low Energy [CVE-2020-15802] [CVE-2022-20361] (github-poc-repo)
- BLURtooth: Exploiting Cross-Transport Key Derivation in Bluetooth Classic and Bluetooth Low Energy [CVE-2020-15802] [CVE-2022-20361] (github-poc)
- BLURtooth: Exploiting Cross-Transport Key Derivation in Bluetooth Classic and Bluetooth Low Energy [CVE-2020-15802] [CVE-2022-20361] (github-poc)
- BLURtooth: Exploiting Cross-Transport Key Derivation in Bluetooth Classic and Bluetooth Low Energy [CVE-2020-15802] [CVE-2022-20361] (github-poc)
- BLURtooth: Exploiting Cross-Transport Key Derivation in Bluetooth Classic and Bluetooth Low Energy [CVE-2020-15802] [CVE-2022-20361] (github-poc)
…and 5 more exploits
Timeline
- Aug 2, 2022 CVE Published
- Aug 10, 2022 EPSS Score
- Aug 17, 2022 PoC Published
- Aug 18, 2022 EPSS Score
- Aug 18, 2022 PoC Published
- Aug 20, 2022 PoC Published
- Sep 25, 2022 EPSS Score
- Dec 27, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Mar 29, 2023 EPSS Score
- May 14, 2023 EPSS Score
- Aug 14, 2023 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-0887.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0887 advisory
- https://source.android.com/security/bulletin/2022-08-01 advisory
- https://source.android.com/security/bulletin/pixel/2022-08-01 advisory
- https://alas.aws.amazon.com/AL2/ALASKERNEL-5.4-2022-036.html advisory
- https://ubuntu.com/security/notices/USN-5682-1 advisory
- https://access.redhat.com/errata/RHSA-2022:8267 advisory
- https://oss.oracle.com/pipermail/oraclevm-errata/2022-December/001064.html advisory
- https://ubuntu.com/security/notices/USN-5854-1 advisory
- https://access.redhat.com/errata/RHSA-2024:0930 advisory
- https://lists.suse.com/pipermail/sle-security-updates/2024-September/019532.html advisory