Follow @discotekdotca
CVE-2014-0997
Current Description
WiFiMonitor in Android 4.4.4 as used in the Nexus 5 and 4, Android 4.2.2 as used in the LG D806, Android 4.2.2 as used in the Samsung SM-T310, Android 4.1.2 as used in the Motorola RAZR HD, and potentially other unspecified Android releases before 5.0.1 and 5.0.2 does not properly handle exceptions, which allows remote attackers to cause a denial of service (reboot) via a crafted 802.11 probe response frame.
Basic Data
| Published | September 26, 2017 |
|---|---|
| Last Modified | October 09, 2018 |
| Assigner | cve@mitre.org |
| Data Type | CVE |
| Data Format | MITRE |
| Data Version | 4.0 |
| Problem Type | CWE-19 |
| CVE Data Version | 4.0 |
Base Metric V2
| CVSS 2 - Version | 2.0 |
|---|---|
| CVSS 2 - Vector String | AV:N/AC:L/Au:N/C:N/I:N/A:P |
| CVSS 2 - Access Vector | NETWORK |
| CVSS 2 - Access Complexity | LOW |
| CVSS 2 - Authentication | NONE |
| CVSS 2 - Confidentiality Impact | NONE |
| CVSS 2 - Availability Impact | PARTIAL |
| CVSS 2 - Base Score | 5.0 |
| Severity | MEDIUM |
| Exploitability Score | 10.0 |
| Impact Score | 2.9 |
| Obtain All Privilege | false |
| Obtain User Privilege | false |
| Obtain Other Privilege | false |
Base Metric V3
| CVSS 3 - Version | 3.0 |
|---|---|
| CVSS 3 - Vector String | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| CVSS 3 - Attack Vector | NETWORK |
| CVSS 3 - Attack Complexity | LOW |
| CVSS 3 - Privileges Required | NONE |
| CVSS 3 - User Interaction | NONE |
| CVSS 3 - Scope | UNCHANGED |
| CVSS 3 - Confidentiality Impact | NONE |
| CVSS 3 - Integrity Impact | NONE |
| CVSS 3 - Availability Impact | HIGH |
| CVSS 3 - Base Score | 7.5 |
| CVSS 3 - Base Severity | HIGH |
| Exploitability Score | 3.9 |
| Base Severity | HIGH |
Configurations
-
AND
-
OR - Configuration 1
Cpe Version Part Vendor Product Version Update Edition Language SW Edition Target SW Target HW Other Version Start Including Version End Including Version Start Excluding Version End Excluding 2.3 OS Google Android 4.4.4 * * * * * * * -
OR Running on/with:
Cpe Version Part Vendor Product Version Update Edition Language SW Edition Target SW Target HW Other Version Start Including Version End Including Version Start Excluding Version End Excluding 2.3 Hardware Google Nexus 4 - * * * * * * * 2.3 Hardware Google Nexus 5 - * * * * * * *
-
OR - Configuration 1
-
AND
-
OR - Configuration 2
Cpe Version Part Vendor Product Version Update Edition Language SW Edition Target SW Target HW Other Version Start Including Version End Including Version Start Excluding Version End Excluding 2.3 OS Google Android 4.2.2 * * * * * * * -
OR Running on/with:
Cpe Version Part Vendor Product Version Update Edition Language SW Edition Target SW Target HW Other Version Start Including Version End Including Version Start Excluding Version End Excluding 2.3 Hardware Lg D806 - * * * * * * * 2.3 Hardware Samsung Sm-t310 - * * * * * * *
-
OR - Configuration 2
-
AND
-
OR - Configuration 3
Cpe Version Part Vendor Product Version Update Edition Language SW Edition Target SW Target HW Other Version Start Including Version End Including Version Start Excluding Version End Excluding 2.3 OS Google Android 4.1.2 * * * * * * * -
OR Running on/with:
Cpe Version Part Vendor Product Version Update Edition Language SW Edition Target SW Target HW Other Version Start Including Version End Including Version Start Excluding Version End Excluding 2.3 Hardware Motorola Razr Hd - * * * * * * *
-
OR - Configuration 3
Vulnerable Software List
| Vendor | Product | Versions |
|---|---|---|
| Android | 4.1.2, 4.2.2, 4.4.4 |
References
| Name | Source | URL | Tags |
|---|---|---|---|
| http://packetstormsecurity.com/files/130107/Android-WiFi-Direct-Denial-Of-Service.html | http://packetstormsecurity.com/files/130107/Android-WiFi-Direct-Denial-Of-Service.html | MISC | Exploit Issue Tracking Third Party Advisory VDB Entry |
| 20150126 [CORE-2015-0002] - Android WiFi-Direct Denial of Service | http://seclists.org/fulldisclosure/2015/Jan/104 | FULLDISC | Exploit Issue Tracking Mailing List Third Party Advisory |
| 20150126 [CORE-2015-0002] - Android WiFi-Direct Denial of Service | http://www.securityfocus.com/archive/1/534544/100/0/threaded | BUGTRAQ | |
| 72311 | http://www.securityfocus.com/bid/72311 | BID | Third Party Advisory VDB Entry |
| https://www.coresecurity.com/advisories/android-wifi-direct-denial-service | https://www.coresecurity.com/advisories/android-wifi-direct-denial-service | MISC | Exploit Issue Tracking Third Party Advisory |
| 35913 | https://www.exploit-db.com/exploits/35913/ | EXPLOIT-DB | Exploit Issue Tracking Third Party Advisory VDB Entry |