7.1

CVE-2017-15330

EPSS 0.55%
Veröffentlicht 15.02.2018 16:29:00
Zuletzt bearbeitet 21.11.2024 03:14:28
Erkennungen
Login

The Flp Driver in some Huawei smartphones of the software Vicky-AL00AC00B124D, Vicky-AL00AC00B157D, Vicky-AL00AC00B167 has a double free vulnerability. An attacker can trick a user to install a malicious application which has a high privilege to exploit this vulnerability. Successful exploitation may cause denial of service (DoS) attack.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 3 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Huawei ≫ Vicky-al00a Firmware Version vicky-al00ac00b124d

Huawei ≫ Vicky-al00a Version -

Huawei ≫ Vicky-al00a Firmware Version vicky-al00ac00b157d

Huawei ≫ Vicky-al00a Version -

Huawei ≫ Vicky-al00a Firmware Version vicky-al00ac00b167

Huawei ≫ Vicky-al00a Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.55%	0.427

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.5	1.8	3.6	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
NIST	7.1	8.6	6.9	AV:N/AC:M/Au:N/C:N/I:N/A:C

CWE-415 Double Free

The product calls free() twice on the same memory address.

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-smartphone-en

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2017-15330

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-15330

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-15330

EUVD