PT-2017-15516 · Huawei · Honor 5A

Publicado 2017-11-22 · Atualizado 2017-12-11 · CVE-2017-2729

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Honor 5A smart phones with software versions earlier than CAM-TL00C01B193 Honor 5A smart phones with software versions earlier than CAM-TL00HC00B193 Honor 5A smart phones with software versions earlier than CAM-UL00C00B193

Description The boot loaders in Honor 5A smart phones have a buffer overflow issue. An attacker with root privilege of an Android system can trick a user into installing a malicious APP, which can modify specific data to cause buffer overflow in the next system reboot. This can lead to continuous system reboot or arbitrary code execution.

Recommendations For versions earlier than CAM-TL00C01B193, update to version CAM-TL00C01B193 or later. For versions earlier than CAM-TL00HC00B193, update to version CAM-TL00HC00B193 or later. For versions earlier than CAM-UL00C00B193, update to version CAM-UL00C00B193 or later.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2017-2729

Produtos afetados

Honor 5A

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-2729 · Nota de Segurança
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20170302-01-smartphone-en · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-2729 · Aviso do Fabricante
• http://securityfocus.com/bid/96526 · Nota