CVE-2017-8203

Опубликовано: 22 нояб. 2017

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

The Bastet Driver of Nova 2 Plus,Nova 2 Huawei smart phones with software of Versions earlier than BAC-AL00C00B173,Versions earlier than PIC-AL00C00B173 has a use after free (UAF) vulnerability. An attacker can convince a user to install a malicious application which has a high privilege to exploit this vulnerability, Successful exploitation may cause arbitrary code execution.

Ссылки

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-smartphone-en
Vendor Advisory
http://www.securityfocus.com/bid/101960
Third Party Advisory
VDB Entry
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-smartphone-en
Vendor Advisory
http://www.securityfocus.com/bid/101960
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:huawei:nova_2_firmware:*:*:*:*:*:*:*:*

Версия до pic-al00c00b173 (исключая)

cpe:2.3:h:huawei:nova_2:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:huawei:nova_2_plus_firmware:*:*:*:*:*:*:*:*

Версия до bac-al00c00b173 (исключая)

cpe:2.3:h:huawei:nova_2_plus:-:*:*:*:*:*:*:*

EPSS

Процентиль: 49%

0.00257

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-416

Связанные уязвимости

GHSA-x4r6-c6j7-6hfx