Google Android Runtime CVE-2017-13176 Privilege Escalation Vulnerability

Bugtraq ID:	102422
Class:	Unknown
CVE:	CVE-2017-13176
Remote:	Yes
Local:	No
Published:	Jan 05 2018 12:00AM
Updated:	Jan 05 2018 12:00AM
Credit:	Tongxin Li and Xinhui Han of Peking University; Luyi Xing, Nan Zhang, Xueqiang Wang, and XiaoFeng Wang of Indiana University Bloomington; Xiaolong Bai of Tsinghua University; and Kai Chen of IIE, Chinese Academy of Sciences
Vulnerable:	Google Android 7.1.1 Google Android 6.0.1 Google Android 5.1.1 Google Android 8.1 Google Android 8.0 Google Android 7.1.2 Google Android 7.0 Google Android 6.0
Not Vulnerable:

Google Android Runtime CVE-2017-13176 Privilege Escalation Vulnerability

Google Android is prone to a privilege escalation vulnerability.

Attackers can exploit this issue to execute arbitrary code within the context of a privileged process.

This issue is being tracked by Android Bug ID A-68341964.

Google Android Runtime CVE-2017-13176 Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Google Android Runtime CVE-2017-13176 Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Google Android Runtime CVE-2017-13176 Privilege Escalation Vulnerability

References:

• Android Homepage (Google)
  
• Android Security Bulletin�??January 2018 (Google)