Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2017-13156

EPSS 59.67% · P98
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2017-13156

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An elevation of privilege vulnerability in the Android system (art). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-64211847.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Android System(art) 权限许可和访问控制问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Android是美国谷歌（Google）公司和开放手持设备联盟（简称OHA）共同开发的一套以Linux为基础的开源操作系统。System（art）是使用在其中的一个ART模式运行环境。 Android中的System(art)存在提权漏洞。远程攻击者可利用该漏洞提升权限。以下版本受到影响：Android 5.1.1版本，6.0版本，6.0.1版本，7.0版本，7.1.1版本，7.1.2版本，8.0版本。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
Google Inc.Android 5.1.1 -

II. Public POCs for CVE-2017-13156

#POC DescriptionSource LinkShenlong Link
1Nonehttps://github.com/xyzAsian/Janus-CVE-2017-13156POC Details
2Nonehttps://github.com/caxmd/CVE-2017-13156POC Details
3A collection of tools for the Janus exploit [CVE-2017-13156].https://github.com/giacomoferretti/janus-toolkitPOC Details
4CVE-2017-13156-Janus复现https://github.com/tea9/CVE-2017-13156-JanusPOC Details
5To determine if an APK is vulnerable to CVE-2017-13156https://github.com/M507/CVE-2017-13156POC Details
6Android Application Vulnerability Exploithttps://github.com/nahid0x1/Janus-Vulnerability-CVE-2017-13156-ExploitPOC Details
7Comprehensive Android security vulnerability demonstrations featuring CVE-2017-13156 (Janus), broadcast receiver exploitation, external storage threats, and rooted device attacks. Educational PoCs with working code, exploitation scripts, and security controls for developers and researchers. To be updated...https://github.com/nictjh/threatDemosPOC Details
8Android Application Vulnerability Exploithttps://github.com/nishan0x1/Janus-Vulnerability-CVE-2017-13156-ExploitPOC Details
9Android Application Vulnerability Exploithttps://github.com/l1ackernishan/Janus-Vulnerability-CVE-2017-13156-ExploitPOC Details
10Android Application Vulnerability Exploithttps://github.com/l1ackerronin/Janus-Vulnerability-CVE-2017-13156-ExploitPOC Details
11Android Application Vulnerability Exploithttps://github.com/ronin0x1/Janus-Vulnerability-CVE-2017-13156-ExploitPOC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2017-13156

请登录查看更多情报信息。

Same Patch Batch · Google Inc. · 2017-12-06 · 38 CVEs total

CVE-2017-13167Android Kernel Sound timer 权限许可和访问控制问题漏洞
CVE-2017-13158Android System(activitymanagerservice) 信息泄露漏洞
CVE-2017-13159Android System(activitymanagerservice) 信息泄露漏洞
CVE-2017-13160Android System(bluetooth) 安全漏洞
CVE-2017-13161Android Broadcom组件权限许可和访问控制问题漏洞
CVE-2017-13162Android Kernel Binder 权限许可和访问控制问题漏洞
CVE-2017-13163Android Kernel MTP USB驱动程序权限许可和访问控制问题漏洞
CVE-2017-13164Android Kernel Binder驱动程序信息泄露漏洞
CVE-2017-13165Android Kernel File系统权限许可和访问控制问题漏洞
CVE-2017-13166Android Kernel V4L2 video驱动程序权限许可和访问控制问题漏洞
CVE-2017-13157Android System(activitymanagerservice) 信息泄露漏洞
CVE-2017-13168Android Kernel SCSI驱动程序权限许可和访问控制漏洞
CVE-2017-13169Android Kernel Camera服务器信息泄露漏洞
CVE-2017-13170Android MediaTek Displa驱动程序权限许可和访问控制问题漏洞
CVE-2017-13171Android MediaTek Performance service 权限许可和访问控制问题漏洞
CVE-2017-13172Android MediaTek Bluetooth驱动程序权限许可和访问控制问题漏洞
CVE-2017-13173Android MediaTek System server 权限许可和访问控制问题漏洞
CVE-2017-13174Android Kernel EDL 权限许可和访问控制问题漏洞
CVE-2017-13175Android NVIDIA libwilhelm 信息泄露漏洞
CVE-2017-0879Android Media framework 信息泄露漏洞

Showing top 20 of 38 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Android
Same vendor: Google Inc.

V. Comments for CVE-2017-13156

No comments yet

Leave a comment