PT-2017-9793 · Huawei · Huawei P8 Lite+2

Publicado 2017-04-02 · Atualizado 2017-04-07 · CVE-2016-8763

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Huawei P9 versions prior to EVA-AL10C00B352 Huawei P9 Lite versions prior to VNS-L21C185B130 Huawei P8 Lite versions prior to ALE-L02C636B150

Description The issue is related to an improper resource release in the TrustZone driver. This allows attackers to cause a system restart or potentially elevate privileges.

Recommendations For Huawei P9 versions prior to EVA-AL10C00B352, update to version EVA-AL10C00B352 or later. For Huawei P9 Lite versions prior to VNS-L21C185B130, update to version VNS-L21C185B130 or later. For Huawei P8 Lite versions prior to ALE-L02C636B150, update to version ALE-L02C636B150 or later.

Correção

Enumeração de Fraquezas

CWE-664

Identificadores relacionados

CVE-2016-8763

Produtos afetados

Huawei P8 Lite

Huawei P9

Huawei P9 Lite

Referências · 4

• https://osv.dev/vulnerability/CVE-2016-8763 · Aviso do Fabricante
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20161123-01-smartphone-en · Aviso do Fabricante
• http://securityfocus.com/bid/94509 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-8763 · Nota de Segurança