Lucene search

Huawei TechnologiesHUAWEI-SA-20160921-01-SMARTPHONE

HistorySep 21, 2016 - 12:00 a.m.

Security Advisory - DOS Vulnerability in Video Driver of Huawei Smart Phone

2016-09-2100:00:00

Huawei Technologies

www.huawei.com

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

23.8%

JSON

There is a Denial of Service (DoS) vulnerability in the video driver of some Huawei products. An attacker may trick a user into installing a malicious application, and the application can send given parameter to video driver to reboot the system. (Vulnerability ID: HWPSIRT-2016-08046)

This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2016-8279.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160921-01-smartphone-en

Affected configurations

Vulners

Node

huaweimate_s_firmwareRange<CRR-TL00C01B362

huaweimate_s_firmwareRange<CRR-UL20C00B362

huaweimate_s_firmwareRange<CRR-CL00C92B362

huaweimate_s_firmwareRange<CRR-CL20C92B362

huaweip8\[1\]Range<GRA-TL00C01B366

huaweip8\[1\]Range<GRA-UL00C00B366

huaweip8\[1\]Range<GRA-UL10C00B366

huaweip8\[1\]Range<GRA-CL00C92B366

huaweihonor_6Range<6.9.16

huaweihonor_6_plusRange<6.9.16

CPENameOperatorVersion
mate s[1]ltCRR-TL00C01B362
mate s[1]ltCRR-UL20C00B362
mate s[1]ltCRR-CL00C92B362
mate s[1]ltCRR-CL20C92B362
p8[1]ltGRA-TL00C01B366
p8[1]ltGRA-UL00C00B366
p8[1]ltGRA-UL10C00B366
p8[1]ltGRA-CL00C92B366
honor 6lt6.9.16
honor 6 pluslt6.9.16

Name	Operator	Version
mate s[1]	lt	CRR-TL00C01B362
mate s[1]	lt	CRR-UL20C00B362
mate s[1]	lt	CRR-CL00C92B362
mate s[1]	lt	CRR-CL20C92B362
p8[1]	lt	GRA-TL00C01B366
p8[1]	lt	GRA-UL00C00B366
p8[1]	lt	GRA-UL10C00B366
p8[1]	lt	GRA-CL00C92B366
honor 6	lt	6.9.16
honor 6 plus	lt	6.9.16

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

23.8%

JSON

Related for HUAWEI-SA-20160921-01-SMARTPHONE