CVE-2017-0561

A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the context of the Wi-Fi SoC. This issue is rated as Critical due to the possibility of remote code execution in the context of the Wi-Fi SoC. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34199105. References: B-RB#110814.

A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the context of the Wi-Fi SoC. This issue is rated as Critical due to the possibility of remote code execution in the context of the Wi-Fi SoC. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34199105. References: B-RB#110814.

A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the context of the Wi-Fi SoC. This issue is rated as Critical due to the possibility of remote code execution in the context of the Wi-Fi SoC. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34199105. References: B-RB#110814.

A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the context of the Wi-Fi SoC. This issue is rated as Critical due to the possibility of remote code execution in the context of the Wi-Fi SoC. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34199105. References: B-RB#110814.

A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the context of the Wi-Fi SoC. This issue is rated as Critical due to the possibility of remote code execution in the context of the Wi-Fi SoC. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34199105. References: B-RB#110814.

A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the context of the Wi-Fi SoC. This issue is rated as Critical due to the possibility of remote code execution in the context of the Wi-Fi SoC. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34199105. References: B-RB#110814.

Updated nonfree firmwares fixes at least the following security issues:

Broadcom firmware fixes:

• dropping BRCM proprietary packets received over the air (CVE-2016-0801)
• adding length checks for TDLS action frames (CVE-2017-0561)
• adding length checks for WME IE (CVE-2017-9417)

Iwlwifi firmware fixes:

• The reinstallation of the Group Temporal key could be used for replay attacks (CVE-2017-13080)
• The reinstallation of the Integrity Group Temporal key could be used for replay attacks (CVE-2017-13081)

This update also adds updated firmwares:

• ath10k, cxgb4, liquidio, mrvl, ql2400, ql2500, wilc1000
• Amd Polaris10-12, Intel BXT/SKL/KBL/CNL

and new firmwares:

• Amd Vega10 and Raven
• Cavium nitrox
• Intel CNL/GLK, IPU3, JeffersonPeak, ThunderPeak
• Mellanox Spectrum
• nVidia GP108 (GTX1030)
• Qualcom Adreno &Venus, imx SDMA,
• Realtek rtl8822be

in order to support new hardware supported by 4.14 series kernels.