cvelist/2018/9xxx/CVE-2018-9426.json

{
    "data_version": "4.0",
    "data_type": "CVE",
    "data_format": "MITRE",
    "CVE_data_meta": {
        "ID": "CVE-2018-9426",
        "ASSIGNER": "security@android.com",
        "STATE": "PUBLIC"
    },
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "In \u00a0RsaKeyPairGenerator::getNumberOfIterations of RSAKeyPairGenerator.java,\u00a0an incorrect implementation could cause weak RSA key pairs being generated.\u00a0This could lead to crypto vulnerability with no additional execution\u00a0privileges needed. User interaction is not needed for exploitation.\u00a0Bulletin Fix: The fix is designed to correctly implement the key generation according to FIPS standard."
            }
        ]
    },
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "lang": "eng",
                        "value": "n/a"
                    }
                ]
            }
        ]
    },
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "vendor_name": "Google",
                    "product": {
                        "product_data": [
                            {
                                "product_name": "Android",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_affected": "=",
                                            "version_value": "7"
                                        },
                                        {
                                            "version_affected": "=",
                                            "version_value": "7.1.1"
                                        },
                                        {
                                            "version_affected": "=",
                                            "version_value": "7.1.2"
                                        },
                                        {
                                            "version_affected": "=",
                                            "version_value": "8"
                                        },
                                        {
                                            "version_affected": "=",
                                            "version_value": "8.1"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                }
            ]
        }
    },
    "references": {
        "reference_data": [
            {
                "url": "https://source.android.com/docs/security/bulletin/pixel/2018-07-01",
                "refsource": "MISC",
                "name": "https://source.android.com/docs/security/bulletin/pixel/2018-07-01"
            }
        ]
    },
    "generator": {
        "engine": "Vulnogram 0.2.0"
    },
    "source": {
        "discovery": "UNKNOWN"
    }
}