CVE-2017-18324: Infoleak
First published: Mon Dec 03 2018(Updated: )
Cryptographic key material leaked in debug messages - GERAN in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 835, SD 855, SDX24, Snapdragon_High_Med_2016.
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Qualcomm MDM9206 firmware | ||
| Qualcomm MDM9206 | ||
| Qualcomm MDM9607 firmware | ||
| Qualcomm MDM9607 | ||
| Qualcomm MDM9615 firmware | ||
| Qualcomm MDM9615 | ||
| Qualcomm MDM9625 firmware | ||
| Qualcomm MDM9625 | ||
| Qualcomm MDM9635M firmware | ||
| Qualcomm MDM9635M | ||
| qualcomm mdm9645 firmware | ||
| qualcomm mdm9645 | ||
| Qualcomm MDM9650 firmware | ||
| Qualcomm MDM9650 | ||
| Qualcomm MDM9655 firmware | ||
| Qualcomm MDM9655 | ||
| Qualcomm MSM8909W | ||
| Qualcomm MSM8909W | ||
| qualcomm SD 210 firmware | ||
| qualcomm SD 210 | ||
| qualcomm SD 212 firmware | ||
| qualcomm SD 212 | ||
| qualcomm SD 205 firmware | ||
| qualcomm SD 205 | ||
| qualcomm sd 410 firmware | ||
| qualcomm sd 410 | ||
| qualcomm sd 412 firmware | ||
| qualcomm sd 412 | ||
| qualcomm SD 425 firmware | ||
| qualcomm SD 425 | ||
| Qualcomm SD 427 firmware | ||
| Qualcomm SD 427 | ||
| Qualcomm SD 430 firmware | ||
| Qualcomm SD 430 | ||
| Qualcomm SD 435 firmware | ||
| Qualcomm SD 435 | ||
| Qualcomm SD 450 firmware | ||
| Qualcomm SD 450 | ||
| qualcomm sd 615 firmware | ||
| qualcomm sd 615 | ||
| qualcomm sd 616 firmware | ||
| qualcomm sd 616 | ||
| qualcomm sd 415 firmware | ||
| qualcomm sd 415 | ||
| qualcomm SD 625 firmware | ||
| qualcomm SD 625 | ||
| qualcomm sd 650 firmware | ||
| qualcomm sd 650 | ||
| qualcomm sd 652 firmware | ||
| qualcomm sd 652 | ||
| qualcomm SD 800 firmware | ||
| qualcomm SD 800 | ||
| qualcomm sd 810 firmware | ||
| qualcomm sd 810 | ||
| qualcomm SD 820 firmware | ||
| qualcomm SD 820 | ||
| qualcomm SD 835 firmware | ||
| qualcomm SD 835 | ||
| qualcomm SD 855 firmware | ||
| qualcomm SD 855 | ||
| Qualcomm sdx24 firmware | ||
| Qualcomm sdx24 | ||
| Qualcomm Snapdragon High Med 2016 Firmware | ||
| Qualcomm Snapdragon High Med 2016 | ||
| Android |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2017-18324?
CVE-2017-18324 is a vulnerability that allows cryptographic key material to be leaked in debug messages in GERAN in Snapdragon mobile and Snapdragon Wear devices.
What is the severity of CVE-2017-18324?
The severity of CVE-2017-18324 is high.
Which devices are affected by CVE-2017-18324?
Devices affected by CVE-2017-18324 include Snapdragon mobile and Snapdragon Wear devices running MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650, SD 652, SD 800, SD 810, SD 820, SD 835, SD 855, SDX24, and Qualcomm Snapdragon High Med 2016 firmware versions.
How do I fix CVE-2017-18324?
To fix CVE-2017-18324, it is recommended to update your firmware to the latest version provided by the device manufacturer.
Where can I find more information about CVE-2017-18324?
You can find more information about CVE-2017-18324 at the following references: [Reference 1](https://source.android.com/docs/security/bulletin/2018-12-01/#asterisk), [Reference 2](https://source.android.com/docs/security/bulletin/2018-12-01), [Reference 3](http://www.securityfocus.com/bid/106128)
- agent/type
- agent/references
- agent/first-publish-date
- agent/severity
- agent/weakness
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/event
- agent/last-modified-date
- agent/source
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- vendor/qualcomm
- canonical/qualcomm mdm9206 firmware
- canonical/qualcomm mdm9206
- canonical/qualcomm mdm9607 firmware
- canonical/qualcomm mdm9607
- canonical/qualcomm mdm9615 firmware
- canonical/qualcomm mdm9615
- canonical/qualcomm mdm9625 firmware
- canonical/qualcomm mdm9625
- canonical/qualcomm mdm9635m firmware
- canonical/qualcomm mdm9635m
- canonical/qualcomm mdm9645 firmware
- canonical/qualcomm mdm9645
- canonical/qualcomm mdm9650 firmware
- canonical/qualcomm mdm9650
- canonical/qualcomm mdm9655 firmware
- canonical/qualcomm mdm9655
- canonical/qualcomm msm8909w
- canonical/qualcomm sd 210 firmware
- canonical/qualcomm sd 210
- canonical/qualcomm sd 212 firmware
- canonical/qualcomm sd 212
- canonical/qualcomm sd 205 firmware
- canonical/qualcomm sd 205
- canonical/qualcomm sd 410 firmware
- canonical/qualcomm sd 410
- canonical/qualcomm sd 412 firmware
- canonical/qualcomm sd 412
- canonical/qualcomm sd 425 firmware
- canonical/qualcomm sd 425
- canonical/qualcomm sd 427 firmware
- canonical/qualcomm sd 427
- canonical/qualcomm sd 430 firmware
- canonical/qualcomm sd 430
- canonical/qualcomm sd 435 firmware
- canonical/qualcomm sd 435
- canonical/qualcomm sd 450 firmware
- canonical/qualcomm sd 450
- canonical/qualcomm sd 615 firmware
- canonical/qualcomm sd 615
- canonical/qualcomm sd 616 firmware
- canonical/qualcomm sd 616
- canonical/qualcomm sd 415 firmware
- canonical/qualcomm sd 415
- canonical/qualcomm sd 625 firmware
- canonical/qualcomm sd 625
- canonical/qualcomm sd 650 firmware
- canonical/qualcomm sd 650
- canonical/qualcomm sd 652 firmware
- canonical/qualcomm sd 652
- canonical/qualcomm sd 800 firmware
- canonical/qualcomm sd 800
- canonical/qualcomm sd 810 firmware
- canonical/qualcomm sd 810
- canonical/qualcomm sd 820 firmware
- canonical/qualcomm sd 820
- canonical/qualcomm sd 835 firmware
- canonical/qualcomm sd 835
- canonical/qualcomm sd 855 firmware
- canonical/qualcomm sd 855
- canonical/qualcomm sdx24 firmware
- canonical/qualcomm sdx24
- canonical/qualcomm snapdragon high med 2016 firmware
- canonical/qualcomm snapdragon high med 2016
- vendor/google
- canonical/android