CVE-2017-17171

Some Huawei smart phones have the denial of service DoS vulnerability due to the improper processing of malicious parameters. An attacker may trick a target user into installing a malicious APK and launch attacks using a pre-installed app with specific permissions. Successful exploit could allow...

Design/Logic Flaw

A vulnerability has been identified in OpenPCS 7 V7.1 and earlier All versions, OpenPCS 7 V8.0 All versions, OpenPCS 7 V8.1 All versions V8.1 Upd5, OpenPCS 7 V8.2 All versions, OpenPCS 7 V9.0 All versions V9.0 Upd1, SIMATIC BATCH V7.1 and earlier All versions, SIMATIC BATCH V8.0 All versions V8.0...

Buffer overflow

The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396 has a buffer overflow vulnerability due to the la...

CVE-2018-7899

The Mali Driver of Huawei Berkeley-AL20 and Berkeley-BD smart phones with software Berkeley-AL20 8.0.0.105C00, 8.0.0.111C00, 8.0.0.112DC00, 8.0.0.116C00, 8.0.0.119C00, 8.0.0.119DC00, 8.0.0.122C00, 8.0.0.132C00, 8.0.0.132DC00, 8.0.0.142C00, 8.0.0.151C00, Berkeley-BD 1.0.0.21, 1.0.0.22, 1.0.0.23,...

CVE-2018-7899

The Mali Driver of Huawei Berkeley-AL20 and Berkeley-BD smart phones with software Berkeley-AL20 8.0.0.105C00, 8.0.0.111C00, 8.0.0.112DC00, 8.0.0.116C00, 8.0.0.119C00, 8.0.0.119DC00, 8.0.0.122C00, 8.0.0.132C00, 8.0.0.132DC00, 8.0.0.142C00, 8.0.0.151C00, Berkeley-BD 1.0.0.21, 1.0.0.22, 1.0.0.23,...

Double free

The Mali Driver of Huawei Berkeley-AL20 and Berkeley-BD smart phones with software Berkeley-AL20 8.0.0.105C00, 8.0.0.111C00, 8.0.0.112DC00, 8.0.0.116C00, 8.0.0.119C00, 8.0.0.119DC00, 8.0.0.122C00, 8.0.0.132C00, 8.0.0.132DC00, 8.0.0.142C00, 8.0.0.151C00, Berkeley-BD 1.0.0.21, 1.0.0.22, 1.0.0.23,...

CVE-2017-17313

The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396 has a buffer overflow vulnerability due to the la...

CVE-2018-7899

The Mali Driver of Huawei Berkeley-AL20 and Berkeley-BD smart phones with software Berkeley-AL20 8.0.0.105C00, 8.0.0.111C00, 8.0.0.112DC00, 8.0.0.116C00, 8.0.0.119C00, 8.0.0.119DC00, 8.0.0.122C00, 8.0.0.132C00, 8.0.0.132DC00, 8.0.0.142C00, 8.0.0.151C00, Berkeley-BD 1.0.0.21, 1.0.0.22, 1.0.0.23,...

CVE-2018-7899

CVE-2018-7899 corresponds to a double-free vulnerability in the Mali driver of Huawei Berkeley-AL20/ Berkeley-BD smartphones (Berkeley-AL20 8.0.0.x and Berkeley-BD 1.0.x ranges). The issue is triggered via the exception handling path and can be exploited by convincing a user to install a maliciou...

CVE-2017-17313

The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396 has a buffer overflow vulnerability due to the la...

Huawei Berkeley Mali Driver Denial of Service Vulnerability

Berkeley-AL20, Berkeley-BD, etc. are smartphone products of China's Huawei Huawei. A denial-of-service vulnerability exists in the Mali driver of the Huawei Berkeley-AL20, Berkeley-BD, which can be exploited by an attacker to cause a system reboot by tricking the user into installing a malicious...

Adobe, Microsoft Push Critical Security Fixes

Adobe and Microsoft each released critical fixes for their products today, a.k.a "Patch Tuesday," the second Tuesday of every month. Adobe updated its Flash Player program to resolve a half dozen critical security holes. Microsoft issued updates to correct at least 65 security vulnerabilities in...

The vulnerability of the SCTP message verification mechanism in Huawei AR3200, Huawei AR1200, and Huawei AR120-S routers allows a hacker to trigger a system reboot.

The vulnerability of the SCTP message verification mechanism in microprogramming software routers of Huawei AR3200, Huawei AR1200, and Huawei AR120-S arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to trigger a...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2017-17131

Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V600R006C00; TE50 V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00; VP9660 V500R002C10 have an DoS vulnerability due to insufficient validation of the parameter when a putty comment key is loaded. An authenticated...

Input validation

Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V600R006C00; TE50 V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00; VP9660 V500R002C10 have an DoS vulnerability due to insufficient validation of the parameter when a putty comment key is loaded. An authenticated...

CVE-2017-17131

CVE-2017-17131 affects Huawei DP300, RP200, V600R006C00, TE30/TE50/TE60, VP9660, and related V500R002C00/V600R006C00/V100R001C10 family products. The vulnerability arises from insufficient validation of a parameter when loading a putty comment key, allowing an authenticated remote attacker to pla...

CVE-2017-15343

Huawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 has an integer overflow vulnerability. The software does not sufficiently validate certain field in SCTP messages, a remote unauthenticated attacker coul...

CVE-2017-15344

Huawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 has an integer overflow vulnerability. The software does not sufficiently validate certain field in SCTP messages, a remote unauthenticated attacker coul...

Integer overflow

Huawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 has an integer overflow vulnerability. The software does not sufficiently validate certain field in SCTP messages, a remote unauthenticated attacker coul...