What is the severity of CVE-2017-17328?

CVE-2017-17328 is considered to have a high severity due to the potential for integer overflow vulnerabilities that could allow an attacker to escalate privileges.

How do I fix CVE-2017-17328?

To fix CVE-2017-17328, ensure that your Huawei MHA-AL00A smartphone is updated to a version beyond MHA-AL00AC00B125.

Who is affected by CVE-2017-17328?

CVE-2017-17328 affects users of Huawei smartphones running the MHA-AL00AC00B125 firmware.

What kind of attack can exploit CVE-2017-17328?

An attacker can exploit CVE-2017-17328 by tricking a user with root privileges into installing a malicious application.

What are the risks associated with CVE-2017-17328?

The risks associated with CVE-2017-17328 include unauthorized access and control of the affected device, leading to potential data breaches.

Vulnerability/
CVE-2017-17328

high

7.1

CWE

190

9/3/2018

29/3/2018

CVE-2017-17328: Integer Overflow

First published: Fri Mar 09 2018(Updated: )

Huawei smartphones with software of MHA-AL00AC00B125 have an integer overflow vulnerability. The software does not process certain variable properly when handle certain process. An attacker tricks the user who has root privilege to install a crafted application, successful exploit could cause information disclosure.

Credit: psirt@huawei.com

Affected Software	Affected Version	How to fix
Huawei Mha-al00a Firmware	=mha-al00ac00b125
Huawei Mha-al00a

Never miss a vulnerability like this again

Reference Links

http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171220-01-smartphone-en

Frequently Asked Questions

What is the severity of CVE-2017-17328?
CVE-2017-17328 is considered to have a high severity due to the potential for integer overflow vulnerabilities that could allow an attacker to escalate privileges.
How do I fix CVE-2017-17328?
To fix CVE-2017-17328, ensure that your Huawei MHA-AL00A smartphone is updated to a version beyond MHA-AL00AC00B125.
Who is affected by CVE-2017-17328?
CVE-2017-17328 affects users of Huawei smartphones running the MHA-AL00AC00B125 firmware.
What kind of attack can exploit CVE-2017-17328?
An attacker can exploit CVE-2017-17328 by tricking a user with root privileges into installing a malicious application.
What are the risks associated with CVE-2017-17328?
The risks associated with CVE-2017-17328 include unauthorized access and control of the affected device, leading to potential data breaches.

collector/nvd-index
agent/author
agent/references
agent/severity
agent/weakness
agent/description
agent/type
agent/event
agent/last-modified-date
agent/softwarecombine
agent/tags
vendor/huawei
canonical/huawei mha-al00a firmware
version/huawei mha-al00a firmware/mha-al00ac00b125
canonical/huawei mha-al00a

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2017-17328?
CVE-2017-17328 is considered to have a high severity due to the potential for integer overflow vulnerabilities that could allow an attacker to escalate privileges.
How do I fix CVE-2017-17328?
To fix CVE-2017-17328, ensure that your Huawei MHA-AL00A smartphone is updated to a version beyond MHA-AL00AC00B125.
Who is affected by CVE-2017-17328?
CVE-2017-17328 affects users of Huawei smartphones running the MHA-AL00AC00B125 firmware.
What kind of attack can exploit CVE-2017-17328?
An attacker can exploit CVE-2017-17328 by tricking a user with root privileges into installing a malicious application.
What are the risks associated with CVE-2017-17328?
The risks associated with CVE-2017-17328 include unauthorized access and control of the affected device, leading to potential data breaches.