PT-2017-16450 · Samsung · Samsung Note

Published 2017-01-12 · Updated 2017-01-27 · CVE-2017-5351

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Samsung Note devices with software versions 4.4, 5.0, 5.1, and 6.0

Description The issue allows attackers to crash the system by creating an arbitrarily large number of active VR service threads.

Recommendations For devices running software version 4.4, update to a version that includes a fix for this issue. For devices running software version 5.0, update to a version that includes a fix for this issue. For devices running software version 5.1, update to a version that includes a fix for this issue. For devices running software version 6.0, update to a version that includes a fix for this issue.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2017-5351

Affected Products

Samsung Note

References · 4

• http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2017 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-5351 · Security Note
• https://osv.dev/vulnerability/CVE-2017-5351 · Vendor Advisory
• http://securityfocus.com/bid/95418 · Note