CVE-2017-8172
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Isub service in P10 Plus and P10 smart phones with earlier than VKY-AL00C00B157 versions and earlier than VTR-AL00C00B157 versions has a denial of service (DoS) vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and the application can send given parameter to specific interface, which make a out-of-bounds array access that results in smart phone restart.
El servicio Isub en los smartphones P10 Plus y P10 en versiones anteriores a VKY-AL00C00B157 y VTR-AL00C00B157 tiene una vulnerabilidad de denegación de servicio (DoS). Un atacante podría engañar a un usuario para que instale una aplicación maliciosa en el smartphone que pueda enviar un parámetro dado a una interfaz determinada, lo que puede provocar un acceso a arrays fuera de límites que resultaría en el reinicio del smartphone.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2017-04-25 CVE Reserved
- 2017-11-22 CVE Published
- 2023-10-02 EPSS Updated
- 2024-09-17 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-129: Improper Validation of Array Index
CAPEC
References (2)
URL | Tag | Source |
---|---|---|
http://www.securityfocus.com/bid/99370 | Third Party Advisory |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170628-01-isub-en | 2017-12-12 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Huawei Search vendor "Huawei" | P10 Plus Firmware Search vendor "Huawei" for product "P10 Plus Firmware" | < vky-al00c00b157 Search vendor "Huawei" for product "P10 Plus Firmware" and version " < vky-al00c00b157" | - |
Affected
| in | Huawei Search vendor "Huawei" | P10 Plus Search vendor "Huawei" for product "P10 Plus" | - | - |
Safe
|
Huawei Search vendor "Huawei" | P10 Firmware Search vendor "Huawei" for product "P10 Firmware" | < vtr-al00c00b157 Search vendor "Huawei" for product "P10 Firmware" and version " < vtr-al00c00b157" | - |
Affected
| in | Huawei Search vendor "Huawei" | P10 Search vendor "Huawei" for product "P10" | - | - |
Safe
|