PT-2017-9792 · Huawei · Huawei P8 Lite+2

Nick Stephens · Publicado 2017-04-02 · Atualizado 2017-04-07 · CVE-2016-8762

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Média

Vetor base

AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Huawei P9 versions prior to EVA-AL10C00B352 Huawei P9 Lite versions prior to VNS-L21C185B130 Huawei P8 Lite versions prior to ALE-L02C636B150

Description The issue is related to an input validation problem in the TrustZone driver. This allows attackers to cause the system to restart.

Recommendations For Huawei P9 versions prior to EVA-AL10C00B352, update to version EVA-AL10C00B352 or later. For Huawei P9 Lite versions prior to VNS-L21C185B130, update to version VNS-L21C185B130 or later. For Huawei P8 Lite versions prior to ALE-L02C636B150, update to version ALE-L02C636B150 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2016-8762

Produtos afetados

Huawei P8 Lite

Huawei P9

Huawei P9 Lite

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-8762 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-8762 · Aviso do Fabricante
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20161123-01-smartphone-en · Aviso do Fabricante
• http://securityfocus.com/bid/94509 · Nota