PT-2017-16450 · Samsung · Samsung Note

Publicado 2017-01-12 · Atualizado 2017-01-27 · CVE-2017-5351

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Samsung Note devices with software versions 4.4, 5.0, 5.1, and 6.0

Description The issue allows attackers to crash the system by creating an arbitrarily large number of active VR service threads.

Recommendations For devices running software version 4.4, update to a version that includes a fix for this issue. For devices running software version 5.0, update to a version that includes a fix for this issue. For devices running software version 5.1, update to a version that includes a fix for this issue. For devices running software version 6.0, update to a version that includes a fix for this issue.

Correção

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2017-5351

Produtos afetados

Samsung Note

Referências · 4

• http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2017 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-5351 · Nota de Segurança
• http://securityfocus.com/bid/95418 · Nota
• https://osv.dev/vulnerability/CVE-2017-5351 · Aviso do Fabricante