PINE64   ›   PINE A64(+)   ›   Android on Pine A64(+)   ›   Stagefright Vulnerabilities!

Thread Closed 
Stagefright Vulnerabilities!
hyperlogos
Pine Adept
***
Joined: Apr 2016
Posts: 33

Reputation: 4
#1
Exclamation  05-04-2016, 06:01 PM
I ran the Stagefright Detector app against my Android install and I got back vulnerable to CVE-2015-3876, CVE-2015-3864, and CVE-2015-6602. CVE-2015-6602 in particular makes the system vulnerable to malicious MP3 and MP4 files!

Stagefright patches are freely and publicly available. Not applying them is dangerous. Will these vulnerabilities be addressed any time soon?
janjwerner
Pine Adept
***
Joined: Jan 2016
Posts: 81

Reputation: 11
#2
05-05-2016, 06:20 PM
I have patched some bugs in the Longsleep's kernel. I don't know of anyone working on security fixes for Android.
Keex
Pine Adept
***
Joined: Apr 2016
Posts: 56

Reputation: 9
#3
05-06-2016, 03:18 AM
(05-04-2016, 06:01 PM)hyperlogos Wrote: I ran the Stagefright Detector app against my Android install and I got back vulnerable to CVE-2015-3876, CVE-2015-3864, and CVE-2015-6602. CVE-2015-6602 in particular makes the system vulnerable to malicious MP3 and MP4 files!

Stagefright patches are freely and publicly available. Not applying them is dangerous. Will these vulnerabilities be addressed any time soon?

Good find. Do you know if these patches can just be installed, or do they need to be incorporated in the kernel somehow?
tkaiser
Pine Scholar
****
Joined: Dec 2015
Posts: 450

Reputation: 51
#4
05-06-2016, 03:35 AM
(05-06-2016, 03:18 AM)Keex Wrote: Do you know if these patches can just be installed, or do they need to be incorporated in the kernel somehow?

The latter.
Armbian for Pine64+ | Pine64 in linux-sunxi wiki
Thread Closed 


Forum Jump:


Users browsing this thread: 1 Guest(s)