Android API Function Address Validation Vulnerability (CVE-2013-6282)

Publish date: 14 de agosto de 2015

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

  Gravedad: Crítico

  Identificadores de CVE : CVE-2013-6282

  Fecha recomendada: 07 de enero de 2014

---

  Descripción

The get_user and put_user API functions of the Linux kernel fail to validate the target address when being used on ARM v6k/v7 platforms. This functionality was originally implemented and controlled by the domain switching feature (CONFIG_CPU_USE_DOMAINS), which has been deprecated due to architectural changes. As a result, any kernel code using these API functions may introduce a security issue where none existed before. This allows an application to read and write kernel memory to, e.g., escalated privileges..

  Soluciones

  Parche : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-6282

Sobre el malware

• ANDROIDOS_HTBENEWS.A
• ANDROIDOS_SHUAME.HRX
• ANDROIDOS_SHUAME.HRXA
• ANDROIDOS_SHUAME.OPS
• ANDROIDOS_SHUAME.A