github - ghsa-5fxj-3vg5-qmf8

ghsa-5fxj-3vg5-qmf8

Vulnerability from github

Published

2022-05-14 03:12

Modified

2022-05-14 03:12

Severity ?

4.2 (Medium) - CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H

Details

Some Huawei smart phones have the denial of service (DoS) vulnerability due to the improper processing of malicious parameters. An attacker may trick a target user into installing a malicious APK and launch attacks using a pre-installed app with specific permissions. Successful exploit could allow the app to send specific parameters to the smart phone driver, which will result in system restart.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2017-17171"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-20"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2018-06-01T14:29:00Z",
    "severity": "MODERATE"
  },
  "details": "Some Huawei smart phones have the denial of service (DoS) vulnerability due to the improper processing of malicious parameters. An attacker may trick a target user into installing a malicious APK and launch attacks using a pre-installed app with specific permissions. Successful exploit could allow the app to send specific parameters to the smart phone driver, which will result in system restart.",
  "id": "GHSA-5fxj-3vg5-qmf8",
  "modified": "2022-05-14T03:12:14Z",
  "published": "2022-05-14T03:12:14Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-17171"
    },
    {
      "type": "WEB",
      "url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-smartphone-en"
    },
    {
      "type": "WEB",
      "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-smartphone"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

cve-2017-17171

Vulnerability from cvelistv5

Published

2018-06-01 14:00

Modified

2024-08-05 20:43

Severity ?

Summary

References

▼	URL	Tags
	http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-smartphone	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Huawei Technologies Co., Ltd.	HUAWEI Mate 8; HUAWEI P9; HUAWEI P9 Plus	Version: HUAWEI Mate 8 Versions earlier than NXT-AL10C00B592 Version: Versions earlier than NXT-CL00C92B592 Version: Versions earlier than NXT-DL00C17B592 Version: Versions earlier than NXT-L09AC636B220 Version: Versions earlier than NXT-L09C185B582 Version: Versions earlier than NXT-L09C432B581 Version: Versions earlier than NXT-L09C605B585 Version: Versions earlier than NXT-L29C10B580 Version: Versions earlier than NXT-L29C185B582 Version: Versions earlier than NXT-L29C636B589 Version: Versions earlier than NXT-TL00C01B592 Version: HUAWEI P9 Versions earlier than EVA-AL00C00B398 Version: Versions earlier than EVA-AL10C00B398 Version: Versions earlier than EVA-CL00C92B398 Version: Versions earlier than EVA-DL00C17B398 Version: Versions earlier than EVA-L09C185B391 Version: Versions earlier than EVA-L09C432B395 Version: Versions earlier than EVA-L09C464B383 Version: Versions earlier than EVA-L09C605B392 Version: Versions earlier than EVA-L09C635B391 Version: Versions earlier than EVA-L09C636B388 Version: Versions earlier than EVA-L19C10B394 Version: Versions earlier than EVA-L19C432B392 Version: Versions earlier than EVA-L19C605B390 Version: Versions earlier than EVA-L19C636B393 Version: Versions earlier than EVA-L29C636B389 Version: Versions earlier than EVA-TL00C01B398 Version: HUAWEI P9 Plus Versions earlier than VIE-L09C318B182 Version: Versions earlier than VIE-L09C432B380 Version: Versions earlier than VIE-L09C576B180 Version: Versions earlier than VIE-L29C605B370 Version: Versions earlier than VIE-L29C636B388

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T20:43:59.889Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-smartphone"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "HUAWEI Mate 8; HUAWEI P9; HUAWEI P9 Plus",
          "vendor": "Huawei Technologies Co., Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "HUAWEI Mate 8 Versions earlier than NXT-AL10C00B592"
            },
            {
              "status": "affected",
              "version": "Versions earlier than NXT-CL00C92B592"
            },
            {
              "status": "affected",
              "version": "Versions earlier than NXT-DL00C17B592"
            },
            {
              "status": "affected",
              "version": "Versions earlier than NXT-L09AC636B220"
            },
            {
              "status": "affected",
              "version": "Versions earlier than NXT-L09C185B582"
            },
            {
              "status": "affected",
              "version": "Versions earlier than NXT-L09C432B581"
            },
            {
              "status": "affected",
              "version": "Versions earlier than NXT-L09C605B585"
            },
            {
              "status": "affected",
              "version": "Versions earlier than NXT-L29C10B580"
            },
            {
              "status": "affected",
              "version": "Versions earlier than NXT-L29C185B582"
            },
            {
              "status": "affected",
              "version": "Versions earlier than NXT-L29C636B589"
            },
            {
              "status": "affected",
              "version": "Versions earlier than NXT-TL00C01B592"
            },
            {
              "status": "affected",
              "version": "HUAWEI P9 Versions earlier than EVA-AL00C00B398"
            },
            {
              "status": "affected",
              "version": "Versions earlier than EVA-AL10C00B398"
            },
            {
              "status": "affected",
              "version": "Versions earlier than EVA-CL00C92B398"
            },
            {
              "status": "affected",
              "version": "Versions earlier than EVA-DL00C17B398"
            },
            {
              "status": "affected",
              "version": "Versions earlier than EVA-L09C185B391"
            },
            {
              "status": "affected",
              "version": "Versions earlier than EVA-L09C432B395"
            },
            {
              "status": "affected",
              "version": "Versions earlier than EVA-L09C464B383"
            },
            {
              "status": "affected",
              "version": "Versions earlier than EVA-L09C605B392"
            },
            {
              "status": "affected",
              "version": "Versions earlier than EVA-L09C635B391"
            },
            {
              "status": "affected",
              "version": "Versions earlier than EVA-L09C636B388"
            },
            {
              "status": "affected",
              "version": "Versions earlier than EVA-L19C10B394"
            },
            {
              "status": "affected",
              "version": "Versions earlier than EVA-L19C432B392"
            },
            {
              "status": "affected",
              "version": "Versions earlier than EVA-L19C605B390"
            },
            {
              "status": "affected",
              "version": "Versions earlier than EVA-L19C636B393"
            },
            {
              "status": "affected",
              "version": "Versions earlier than EVA-L29C636B389"
            },
            {
              "status": "affected",
              "version": "Versions earlier than EVA-TL00C01B398"
            },
            {
              "status": "affected",
              "version": "HUAWEI P9 Plus Versions earlier than VIE-L09C318B182"
            },
            {
              "status": "affected",
              "version": "Versions earlier than VIE-L09C432B380"
            },
            {
              "status": "affected",
              "version": "Versions earlier than VIE-L09C576B180"
            },
            {
              "status": "affected",
              "version": "Versions earlier than VIE-L29C605B370"
            },
            {
              "status": "affected",
              "version": "Versions earlier than VIE-L29C636B388"
            }
          ]
        }
      ],
      "datePublic": "2018-05-30T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Some Huawei smart phones have the denial of service (DoS) vulnerability due to the improper processing of malicious parameters. An attacker may trick a target user into installing a malicious APK and launch attacks using a pre-installed app with specific permissions. Successful exploit could allow the app to send specific parameters to the smart phone driver, which will result in system restart."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "DoS",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-01T13:57:02",
        "orgId": "25ac1063-e409-4190-8079-24548c77ea2e",
        "shortName": "huawei"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-smartphone"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@huawei.com",
          "ID": "CVE-2017-17171",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "HUAWEI Mate 8; HUAWEI P9; HUAWEI P9 Plus",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "HUAWEI Mate 8 Versions earlier than NXT-AL10C00B592"
                          },
                          {
                            "version_value": "Versions earlier than NXT-CL00C92B592"
                          },
                          {
                            "version_value": "Versions earlier than NXT-DL00C17B592"
                          },
                          {
                            "version_value": "Versions earlier than NXT-L09AC636B220"
                          },
                          {
                            "version_value": "Versions earlier than NXT-L09C185B582"
                          },
                          {
                            "version_value": "Versions earlier than NXT-L09C432B581"
                          },
                          {
                            "version_value": "Versions earlier than NXT-L09C605B585"
                          },
                          {
                            "version_value": "Versions earlier than NXT-L29C10B580"
                          },
                          {
                            "version_value": "Versions earlier than NXT-L29C185B582"
                          },
                          {
                            "version_value": "Versions earlier than NXT-L29C636B589"
                          },
                          {
                            "version_value": "Versions earlier than NXT-TL00C01B592"
                          },
                          {
                            "version_value": "HUAWEI P9 Versions earlier than EVA-AL00C00B398"
                          },
                          {
                            "version_value": "Versions earlier than EVA-AL10C00B398"
                          },
                          {
                            "version_value": "Versions earlier than EVA-CL00C92B398"
                          },
                          {
                            "version_value": "Versions earlier than EVA-DL00C17B398"
                          },
                          {
                            "version_value": "Versions earlier than EVA-L09C185B391"
                          },
                          {
                            "version_value": "Versions earlier than EVA-L09C432B395"
                          },
                          {
                            "version_value": "Versions earlier than EVA-L09C464B383"
                          },
                          {
                            "version_value": "Versions earlier than EVA-L09C605B392"
                          },
                          {
                            "version_value": "Versions earlier than EVA-L09C635B391"
                          },
                          {
                            "version_value": "Versions earlier than EVA-L09C636B388"
                          },
                          {
                            "version_value": "Versions earlier than EVA-L19C10B394"
                          },
                          {
                            "version_value": "Versions earlier than EVA-L19C432B392"
                          },
                          {
                            "version_value": "Versions earlier than EVA-L19C605B390"
                          },
                          {
                            "version_value": "Versions earlier than EVA-L19C636B393"
                          },
                          {
                            "version_value": "Versions earlier than EVA-L29C636B389"
                          },
                          {
                            "version_value": "Versions earlier than EVA-TL00C01B398"
                          },
                          {
                            "version_value": "HUAWEI P9 Plus Versions earlier than VIE-L09C318B182"
                          },
                          {
                            "version_value": "Versions earlier than VIE-L09C432B380"
                          },
                          {
                            "version_value": "Versions earlier than VIE-L09C576B180"
                          },
                          {
                            "version_value": "Versions earlier than VIE-L29C605B370"
                          },
                          {
                            "version_value": "Versions earlier than VIE-L29C636B388"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Huawei Technologies Co., Ltd."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Some Huawei smart phones have the denial of service (DoS) vulnerability due to the improper processing of malicious parameters. An attacker may trick a target user into installing a malicious APK and launch attacks using a pre-installed app with specific permissions. Successful exploit could allow the app to send specific parameters to the smart phone driver, which will result in system restart."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "DoS"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-smartphone",
              "refsource": "CONFIRM",
              "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-smartphone"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "25ac1063-e409-4190-8079-24548c77ea2e",
    "assignerShortName": "huawei",
    "cveId": "CVE-2017-17171",
    "datePublished": "2018-06-01T14:00:00",
    "dateReserved": "2017-12-04T00:00:00",
    "dateUpdated": "2024-08-05T20:43:59.889Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted