Lucene search

Huawei TechnologiesHUAWEI-SA-20190814-01-MOBILE

HistoryAug 14, 2019 - 12:00 a.m.

Two Denial of Service Vulnerabilities on Some Huawei Smartphones

2019-08-1400:00:00

Huawei Technologies

www.huawei.com

2.9 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:N/I:N/A:P

5.3 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

25.8%

JSON

There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause an infinite loop and the device to reboot. (Vulnerability ID: HWPSIRT-2019-05093 and HWPSIRT-2019-05095)

The two vulnerabilities have been assigned two Common Vulnerabilities and Exposures (CVE) IDs: CVE-2019-5302 and CVE-2019-5303.

Huawei has released software updates to fix these vulnerabilities. This advisory is available at the following link:

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190814-01-mobile-en

Affected configurations

Vulners

Node

huaweialp-al00bMatch8.0.0.153

huaweialp-l09Match8.0.0.153

huaweialp-l29Match8.0.0.145

huaweibla-al00bRange<9.1.0.333

huaweibla-l29cMatch8.0.0.146

huaweibla-l29cMatch8.0.0.158

huaweibla-l29cRange<9.1.0.302

huaweiberkeley-al20Range<9.1.0.333

huaweiberkeley-l09Match8.0.0.172

huaweiberkeley-l09Match8.0.0.173

huaweicharlotte-l09cMatch8.1.0.128a

huaweicharlotte-l29cMatch8.1.0.157

huaweicharlotte-l29cMatch8.1.0.158

huaweicharlotte-l29cMatch8.1.0.161

huaweicharlotte-l29cMatch8.1.0.162

huaweicolumbia-al10bRange<9.1.0.333

huaweicolumbia-l29dMatch8.1.0.146

huaweicolumbia-l29dMatch8.1.0.148

huaweicolumbia-l29dMatch8.1.0.151

huaweicornell-al00iMatch8.2.0.151

huaweicornell-l29aMatch8.2.0.131

huaweicornell-l29aMatch8.2.0.132

huaweicornell-l29aMatch8.2.0.133

huaweiemily-l09cMatch8.1.0.155

huaweiemily-l09cMatch8.1.0.156

huaweiemily-l09cMatch8.1.0.172

huaweiemily-l29cMatch8.1.0.156

huaweiemily-l29cMatch8.1.0.159

huaweiemily-l29cMatch8.1.0.166

huaweiemily-l29cRange<9.1.0.311

huaweiever-l29bMatch9.0.0.206

huaweiever-l29bMatch9.0.0.207

huaweiever-l29bMatch9.0.0.208

huaweihonor_20Range<9.1.0.131

huaweihonor_20Range<9.1.0.135

huaweimate_9_proRange<9.1.0.310

huaweimate_9_proRange<9.1.0.311

huaweihonor_20Range<9.1.0.135

huaweihuawei_y9_2019Range<9.1.0.264

huaweihuawei_p20Range<9.1.0.333

huaweihuawei_p30Range<9.1.0.193

huaweihuawei_p30Range<9.1.0.186

huaweihuawei_y9_2019Range<9.1.0.220

huaweihuawei_nova_3Range<9.1.0.333

huaweihuawei_nova_3Range<9.1.0.305

huaweiharry-al00cRange<9.1.0.217

huaweiharry-al10bRange<9.1.0.217

huaweihonor_10Range<9.1.0.273

huaweihonor_10Range<9.1.0.280

huaweihonor_10Range<9.1.0.283

huaweihonor_8xRange<9.1.0.217

huaweihonor_8xRange<9.1.0.218

huaweihonor_8xRange<9.1.0.219

huaweihonor_8xRange<9.1.0.221

huaweihonor_view_20Range<9.1.0.235

huaweihonor_view_20Range<9.1.0.238

huaweijackman-al00dRange<9.1.0.213

huaweijackman-l22Match8.2.0.156

huaweijohnson-al00cRange<9.1.0.210

huaweijohnson-al10cRange<9.1.0.210

huaweijohnson-tl00dRange<9.1.0.223

huaweijohnson-tl00fRange<9.1.0.223

huaweilaya-al00epRange<9.1.0.135

huaweiparis-l21bMatch8.2.0.130

huaweiparis-l21mebMatch8.2.0.135

huaweiparis-l29bMatch8.2.0.137

huaweipotter-al00cRange<9.1.0.217

huaweipotter-al10aRange<9.1.0.217

huaweiprinceton-al10bRange<9.1.0.233

huaweiprinceton-al10dRange<9.1.0.234

huaweisydney-l21Match8.2.0.157

huaweisydney-l21Match8.2.0.108

huaweisydney-l21Match8.2.0.137

huaweisydney-l21brMatch8.2.0.130

huaweisydney-l22Match8.2.0.138

huaweisydney-l22brMatch8.2.0.133

huaweisydneym-l01Range<9.1.0.228

huaweisydneym-l01Match8.2.0.132

huaweisydneym-l01Match8.2.0.133

huaweisydneym-l01Match8.2.0.143

huaweisydneym-l03Match8.2.0.135

huaweisydneym-l21Match8.2.0.134

huaweisydneym-l21Match8.2.0.144

huaweisydneym-l22Match8.2.0.132

huaweisydneym-l22Match8.2.0.142

huaweisydneym-l23Match8.2.0.134

huaweitony-al00bRange<10.0.0.187

huaweitony-tl00bRange<10.0.0.187

huaweiyale-al50aRange<9.1.0.152

huaweiyale-l21aMatch9.1.0.107

huaweiharry-al00cRange<9.1.0.217

huaweijackman-al20dRange<9.1.0.213

huaweipotter-al00cRange<9.1.0.217

huaweipotter-al10aRange<9.1.0.217

huaweiyale-al50aRange<9.1.0.152

huaweihonor_8xRange<9.1.0.210

huaweihonor_8xRange<9.1.0.223

huaweihonor_magic2Range<10.0.0.187

huaweihonor_v20Range<9.1.0.233

huaweihonor_v20Range<9.1.0.234

CPENameOperatorVersion
alp-al00beq8.0.0.153
alp-l09eq8.0.0.153
alp-l29eq8.0.0.145
bla-al00blt9.1.0.333
bla-l29ceq8.0.0.146
bla-l29ceq8.0.0.158
bla-l29clt9.1.0.302
berkeley-al20lt9.1.0.333
berkeley-l09eq8.0.0.172
berkeley-l09eq8.0.0.172

Name	Operator	Version
alp-al00b	eq	8.0.0.153
alp-l09	eq	8.0.0.153
alp-l29	eq	8.0.0.145
bla-al00b	lt	9.1.0.333
bla-l29c	eq	8.0.0.146
bla-l29c	eq	8.0.0.158
bla-l29c	lt	9.1.0.302
berkeley-al20	lt	9.1.0.333
berkeley-l09	eq	8.0.0.172
berkeley-l09	eq	8.0.0.172

Rows per page:

1-10 of 1201

2.9 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:N/I:N/A:P

5.3 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

25.8%

JSON

Related for HUAWEI-SA-20190814-01-MOBILE