CVE-2017-17139: Infoleak
Huawei Mate 9 and Mate 9 pro smart phones with software the versions before MHA-AL00B 8.0.0.334(C00); the versions before LON-AL00B 8.0.0.334(C00) have a information leak vulnerability in the date service proxy implementation. An attacker may trick a user into installing a malicious application and application can exploit the vulnerability to get kernel date which may cause sensitive information leak.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Huawei Mate 9 and Mate 9 Pro vulnerability?
The vulnerability ID for this Huawei Mate 9 and Mate 9 Pro vulnerability is CVE-2017-17139.
What is the severity of CVE-2017-17139?
The severity of CVE-2017-17139 is medium with a CVSS score of 5.5.
Which Huawei devices are affected by this vulnerability?
Huawei Mate 9 and Mate 9 Pro smart phones with software versions before MHA-AL00B 8.0.0.334(C00) and LON-AL00B 8.0.0.334(C00) are affected by this vulnerability.
What is the risk of this vulnerability?
This vulnerability allows an attacker to leak information through a malicious application, posing a risk to user privacy.
Is there a fix for this vulnerability?
Yes, updating the software to version MHA-AL00B 8.0.0.334(C00) or LON-AL00B 8.0.0.334(C00) will fix this vulnerability.