Lucene search

[email protected]CVE-2015-8337

HistoryJan 12, 2016 - 7:59 p.m.

CVE-2015-8337

2016-01-1219:59:10

[email protected]

web.nvd.nist.gov

cve-2015-8337

hifi driver

huawei p8

mate7

denial of service

remote attackers

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.6%

JSON

The HIFI driver in Huawei P8 phones with software GRA-TL00 before GRA-TL00C01B220SP01, GRA-CL00 before GRA-CL00C92B220, GRA-CL10 before GRA-CL10C92B220, GRA-UL00 before GRA-UL00C00B220, GRA-UL10 before GRA-UL10C00B220 and Mate7 phones with software MT7-UL00 before MT7-UL00C17B354, MT7-TL10 before MT7-TL10C00B354, MT7-TL00 before MT7-TL00C01B354, and MT7-CL00 before MT7-CL00C92B354 allows remote attackers to cause a denial of service (invalid memory access and reboot) via unspecified vectors related to “input null pointer as parameter.”

Affected configurations

NVD

Node

huaweimate_7_firmwareMatchmt7-cl00

huaweimate_7_firmwareMatchmt7-tl00

huaweimate_7_firmwareMatchmt7-tl10

huaweimate_7_firmwareMatchmt7-ul00

AND

huaweimate_7Match-

Node

huaweip8_firmwareMatchgra-cl10

huaweip8_firmwareMatchgra-cl100

huaweip8_firmwareMatchgra-tl00

huaweip8_firmwareMatchgra-ul10

huaweip8_firmwareMatchgra-ul100

AND

huaweip8Match-

CPENameOperatorVersion
huawei:mate_7_firmwarehuawei mate 7 firmwareeqmt7-cl00
huawei:mate_7_firmwarehuawei mate 7 firmwareeqmt7-tl00
huawei:mate_7_firmwarehuawei mate 7 firmwareeqmt7-tl10
huawei:mate_7_firmwarehuawei mate 7 firmwareeqmt7-ul00

CPE	Name	Operator	Version
huawei:mate_7_firmware	huawei mate 7 firmware	eq	mt7-cl00
huawei:mate_7_firmware	huawei mate 7 firmware	eq	mt7-tl00
huawei:mate_7_firmware	huawei mate 7 firmware	eq	mt7-tl10
huawei:mate_7_firmware	huawei mate 7 firmware	eq	mt7-ul00

References

www.huawei.com/en/psirt/security-advisories/hw-465304

www.securityfocus.com/bid/80357

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.6%

JSON

Related for CVE-2015-8337

cvelist1 prion1 nvd1 huawei1