PT-2016-3951 · Huawei · Huawei P8+1

Yang Chengming + 1 · Publicado 2016-04-13 · Atualizado 2016-04-20 · CVE-2015-8682

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:C

Name of the Vulnerable Software and Affected Versions Huawei P8 smartphones versions GRA-UL00 before GRA-UL00C00B350 Huawei P8 smartphones versions GRA-UL10 before GRA-UL10C00B350 Huawei P8 smartphones versions GRA-TL00 before GRA-TL00C01B350 Huawei P8 smartphones versions GRA-CL00 before GRA-CL00C92B350 Huawei P8 smartphones versions GRA-CL10 before GRA-CL10C92B350 Huawei Mate S smartphones versions CRR-TL00 before CRR-TL00C01B160SP01 Huawei Mate S smartphones versions CRR-UL00 before CRR-UL00C00B160 Huawei Mate S smartphones versions CRR-CL00 before CRR-CL00C92B161

Description The issue allows attackers to obtain sensitive information from stack memory or cause a denial of service (system crash) via a crafted application, which triggers an invalid memory access.

Recommendations For Huawei P8 smartphones versions GRA-UL00 before GRA-UL00C00B350, update to version GRA-UL00C00B350 or later. For Huawei P8 smartphones versions GRA-UL10 before GRA-UL10C00B350, update to version GRA-UL10C00B350 or later. For Huawei P8 smartphones versions GRA-TL00 before GRA-TL00C01B350, update to version GRA-TL00C01B350 or later. For Huawei P8 smartphones versions GRA-CL00 before GRA-CL00C92B350, update to version GRA-CL00C92B350 or later. For Huawei P8 smartphones versions GRA-CL10 before GRA-CL10C92B350, update to version GRA-CL10C92B350 or later. For Huawei Mate S smartphones versions CRR-TL00 before CRR-TL00C01B160SP01, update to version CRR-TL00C01B160SP01 or later. For Huawei Mate S smartphones versions CRR-UL00 before CRR-UL00C00B160, update to version CRR-UL00C00B160 or later. For Huawei Mate S smartphones versions CRR-CL00 before CRR-CL00C92B161, update to version CRR-CL00C92B161 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2015-8682

Produtos afetados

Huawei Mate S

Huawei P8

Referências · 2

• http://huawei.com/en/psirt/security-advisories/huawei-sa-20160130-01-smartphone-en · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-8682 · Nota de Segurança