PT-2016-3893 · Huawei · Huawei Mate 7+1

Guo Yonggang + 1 · Published 2016-01-12 · Updated 2016-11-28 · CVE-2015-8337

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Huawei P8 phones versions GRA-TL00 before GRA-TL00C01B220SP01 Huawei P8 phones versions GRA-CL00 before GRA-CL00C92B220 Huawei P8 phones versions GRA-CL10 before GRA-CL10C92B220 Huawei P8 phones versions GRA-UL00 before GRA-UL00C00B220 Huawei P8 phones versions GRA-UL10 before GRA-UL10C00B220 Huawei Mate7 phones versions MT7-UL00 before MT7-UL00C17B354 Huawei Mate7 phones versions MT7-TL10 before MT7-TL10C00B354 Huawei Mate7 phones versions MT7-TL00 before MT7-TL00C01B354 Huawei Mate7 phones versions MT7-CL00 before MT7-CL00C92B354

Description The issue allows remote attackers to cause a denial of service, resulting in invalid memory access and reboot, via unspecified vectors related to input null pointer as parameter.

Recommendations For Huawei P8 phones versions GRA-TL00 before GRA-TL00C01B220SP01, update to a version after GRA-TL00C01B220SP01. For Huawei P8 phones versions GRA-CL00 before GRA-CL00C92B220, update to a version after GRA-CL00C92B220. For Huawei P8 phones versions GRA-CL10 before GRA-CL10C92B220, update to a version after GRA-CL10C92B220. For Huawei P8 phones versions GRA-UL00 before GRA-UL00C00B220, update to a version after GRA-UL00C00B220. For Huawei P8 phones versions GRA-UL10 before GRA-UL10C00B220, update to a version after GRA-UL10C00B220. For Huawei Mate7 phones versions MT7-UL00 before MT7-UL00C17B354, update to a version after MT7-UL00C17B354. For Huawei Mate7 phones versions MT7-TL10 before MT7-TL10C00B354, update to a version after MT7-TL10C00B354. For Huawei Mate7 phones versions MT7-TL00 before MT7-TL00C01B354, update to a version after MT7-TL00C01B354. For Huawei Mate7 phones versions MT7-CL00 before MT7-CL00C92B354, update to a version after MT7-CL00C92B354.

Fix

Related Identifiers

CVE-2015-8337

Affected Products

Huawei Mate 7

Huawei P8

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-8337 · Security Note
• http://huawei.com/en/psirt/security-advisories/hw-465304 · Vendor Advisory
• http://securityfocus.com/bid/80357 · Note