Lucene search

[email protected]CVE-2016-8757

HistoryApr 02, 2017 - 8:59 p.m.

CVE-2016-8757

2017-04-0220:59:00

CWE-200

[email protected]

web.nvd.nist.gov

cve-2016-8757

huawei p9

information security

uninitialized memory

nvd

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

5.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

20.7%

JSON

ION memory management module in Huawei P9 phones with software EVA-AL10C00B192 and earlier versions, EVA-DL10C00B192 and earlier versions, EVA-TL10C00B192 and earlier versions, EVA-CL10C00B192 and earlier versions allows attackers to obtain sensitive information from uninitialized memory.

CPENameOperatorVersion
huawei:p9_firmwarehuawei p9 firmwareleeva-al10c00b192
huawei:p9_firmwarehuawei p9 firmwareleeva-cl10c00b192
huawei:p9_firmwarehuawei p9 firmwareleeva-dl10c00b192
huawei:p9_firmwarehuawei p9 firmwareleeva-tl10c00b192

CPE	Name	Operator	Version
huawei:p9_firmware	huawei p9 firmware	le	eva-al10c00b192
huawei:p9_firmware	huawei p9 firmware	le	eva-cl10c00b192
huawei:p9_firmware	huawei p9 firmware	le	eva-dl10c00b192
huawei:p9_firmware	huawei p9 firmware	le	eva-tl10c00b192

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20161026-02-smartphone-en

www.securityfocus.com/bid/93932

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

5.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

20.7%

JSON

Related for CVE-2016-8757

prion1 huawei1