CVE-2017-17319: Infoleak
First published: Tue Mar 20 2018(Updated: )
Huawei P9 smartphones with the versions before EVA-AL10C00B399SP02 have an information disclosure vulnerability. The software does not properly protect certain resource which can be accessed by multithreading. An attacker tricks the user who has root privilege to install a crafted application, successful exploit could result in kernel information disclosure.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei P9 Firmware | <eva-al10c00b399sp02 | |
| Huawei P9 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2017-17319?
CVE-2017-17319 is an information disclosure vulnerability found in Huawei P9 smartphones with versions before EVA-AL10C00B399SP02.
What is the severity of CVE-2017-17319?
CVE-2017-17319 has a severity rating of 5.5 (high).
How does CVE-2017-17319 work?
CVE-2017-17319 allows an attacker to access certain resources on Huawei P9 smartphones by tricking a user with root privilege to install a crafted application.
Which software versions are affected by CVE-2017-17319?
Huawei P9 smartphones with versions before EVA-AL10C00B399SP02 are affected by CVE-2017-17319.
How can I fix CVE-2017-17319?
To fix CVE-2017-17319, upgrade your Huawei P9 smartphone to version EVA-AL10C00B399SP02 or higher.
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/references
- agent/tags
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- vendor/huawei
- canonical/huawei p9 firmware
- canonical/huawei p9