Multiple Huawei Server Buffer Overflow Vulnerabilities

Huawei Tecal RH1288 V2 and others are servers from Huawei, a Chinese company. A buffer overflow vulnerability exists in a number of Huawei servers, which stems from the program failing to adequately detect the length of copied data when processing DNS server messages. An attacker could exploit th...

PT-2017-1915

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.1 Description A remote denial of service issue in the Mediaserver's libavc component could allow an attacker to cause a device hang or reboot using a specially crafted file. This issue is related to inadequate...

PT-2017-1918

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.1 Description A remote denial of service issue in the Mediaserver's libavc component could allow an attacker to cause a device hang or reboot using a specially crafted file. This issue is related to inadequate...

PT-2017-1917

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.1 Description A remote denial of service issue in the Mediaserver's libavc component could allow an attacker to cause a device hang or reboot using a specially crafted file. This issue is considered high severi...

PT-2017-1916

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.1 Description The issue is related to insufficient access control in the libavc service of the Mediaserver application in the Android operating system. It allows a remote attacker to cause a device hang or rebo...

CVE-2017-0552: Undefined Security Weakness

A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1...

CVE-2017-0551: Undefined Security Weakness

A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1...

CVE-2017-0548: Improper Restriction of Operations within the Bounds of a Memory Buffer

A remote denial of service vulnerability in libskia could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-33251605...

CVE-2017-6019: Uncontrolled Resource Consumption

An issue was discovered in Schneider Electric Conext ComBox, model 865-1058, all firmware versions prior to V3.03 BN 830. A series of rapid requests to the device may cause it to reboot...

PT-2017-16836

Name of the Vulnerable Software and Affected Versions Schneider Electric Conext ComBox versions prior to V3.03 BN 830 Description An issue was discovered that may cause the device to reboot after a series of rapid requests. Recommendations For versions prior to V3.03 BN 830, update to version V3....

PT-2017-1919

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 7.1.1 Description A remote denial of service issue in libskia could allow an attacker to use a specially crafted file to cause a device hang or reboot. This issue is related to inadequate access control in the...

Multiple Buffer Overflow Vulnerabilities in Huawei Mobile's Bastet Component (CNVD-2017-04679)

Huawei Vicky-AL00A/Victoria-AL00A is a smartphone from Huawei. A buffer overflow vulnerability exists in the Bastet of the Huawei Vicky-AL00A/Victoria-AL00A phones due to a lack of parameter checking. An attacker who has gained root access to the Android system can trick the user into installing ...

Multiple Buffer Overflow Vulnerabilities in Huawei Mobile's Bastet Component (CNVD-2017-04678)

Huawei Vicky-AL00A/Victoria-AL00A is a smartphone from Huawei. A buffer overflow vulnerability exists in the Bastet of the Huawei Vicky-AL00A/Victoria-AL00A phones due to a lack of parameter checking. An attacker who has gained root access to the Android system can trick the user into installing ...

Huawei P9 Plus Denial of Service Vulnerability

Huawei P9 Plus is a smartphone from Huawei. The Huawei P9 Plus denial of service vulnerability is a denial of service vulnerability. Due to insufficient input validation, an attacker can trick the user into installing a malicious application, which can send specially constructed parameters to a...

Huawei Switch Y.1731 Denial of Service Vulnerability

S9300, S2300, S3300, S5300, S6300 are various types of switches introduced by Huawei. Huawei switches are vulnerable to Y.1731 denial of service vulnerability which can cause the switch to reboot...

Security Advisory - Multiple Buffer Overflow Vulnerabilities in Bastet of Huawei Smart Phone

The Bastet of some Huawei mobile phones have three buffer overflow vulnerabilities due to the lack of parameter validation. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause buffer overflow in the...

CVE-2016-8790

Huawei CloudEngine 5800 with software before V200R001C00SPC700, CloudEngine 6800 with software before V200R001C00SPC700, CloudEngine 7800 with software before V200R001C00SPC700, CloudEngine 8800 with software before V200R001C00SPC700, CloudEngine 12800 with software before V200R001C00SPC700 could...

CVE-2016-8790

Huawei CloudEngine 5800 with software before V200R001C00SPC700, CloudEngine 6800 with software before V200R001C00SPC700, CloudEngine 7800 with software before V200R001C00SPC700, CloudEngine 8800 with software before V200R001C00SPC700, CloudEngine 12800 with software before V200R001C00SPC700 could...

CVE-2016-8790: Improper Restriction of Operations within the Bounds of a Memory Buffer

Huawei CloudEngine 5800 with software before V200R001C00SPC700, CloudEngine 6800 with software before V200R001C00SPC700, CloudEngine 7800 with software before V200R001C00SPC700, CloudEngine 8800 with software before V200R001C00SPC700, CloudEngine 12800 with software before V200R001C00SPC700 could...

F5 BIG-IP Product Denial of Service Vulnerability (CNVD-2017-04672)

The F5 BIG-IP is a load balancer that uses a variety of distribution algorithms to distribute network requests to available servers in a server cluster, enabling network visitors to have the best possible networking experience by managing incoming Web data traffic and increasing effective network...