cnvd - cnvd-2017-34413

cnvd-2017-34413

Vulnerability from cnvd

Title: Huawei LON-L29D拒绝服务漏洞

Description:

Huawei LON-L29D是华为公司（Huawei）的一款智能手机。

Huawei LON-L29D手机存在拒绝服务漏洞，攻击者通过发送伪造的3GPP报文导致程序一直无法退出循环，成功利用该漏洞会导致设备复位。

Severity: 中

Patch Name: Huawei LON-L29D拒绝服务漏洞的补丁

Patch Description:

Huawei LON-L29D是华为公司（Huawei）的一款智能手机。

Huawei LON-L29D手机存在拒绝服务漏洞，攻击者通过发送伪造的3GPP报文导致程序一直无法退出循环，成功利用该漏洞会导致设备复位。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： http://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20171108-01-smartphone-cn

Reference: http://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20171108-01-smartphone-cn

Impacted products

Name
Huawei LON-L29D LON-L29DC721B186

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-15345"
    }
  },
  "description": "Huawei LON-L29D\u662f\u534e\u4e3a\u516c\u53f8\uff08Huawei\uff09\u7684\u4e00\u6b3e\u667a\u80fd\u624b\u673a\u3002\r\n\r\nHuawei LON-L29D\u624b\u673a\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u901a\u8fc7\u53d1\u9001\u4f2a\u9020\u76843GPP\u62a5\u6587\u5bfc\u81f4\u7a0b\u5e8f\u4e00\u76f4\u65e0\u6cd5\u9000\u51fa\u5faa\u73af\uff0c\u6210\u529f\u5229\u7528\u8be5\u6f0f\u6d1e\u4f1a\u5bfc\u81f4\u8bbe\u5907\u590d\u4f4d\u3002",
  "discovererName": "Huawei",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttp://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20171108-01-smartphone-cn",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-34413",
  "openTime": "2017-11-17",
  "patchDescription": "Huawei LON-L29D\u662f\u534e\u4e3a\u516c\u53f8\uff08Huawei\uff09\u7684\u4e00\u6b3e\u667a\u80fd\u624b\u673a\u3002\r\n\r\nHuawei LON-L29D\u624b\u673a\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u901a\u8fc7\u53d1\u9001\u4f2a\u9020\u76843GPP\u62a5\u6587\u5bfc\u81f4\u7a0b\u5e8f\u4e00\u76f4\u65e0\u6cd5\u9000\u51fa\u5faa\u73af\uff0c\u6210\u529f\u5229\u7528\u8be5\u6f0f\u6d1e\u4f1a\u5bfc\u81f4\u8bbe\u5907\u590d\u4f4d\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Huawei LON-L29D\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Huawei LON-L29D LON-L29DC721B186"
  },
  "referenceLink": "http://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20171108-01-smartphone-cn",
  "serverity": "\u4e2d",
  "submitTime": "2017-11-09",
  "title": "Huawei LON-L29D\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"
}

CVE-2017-15345 (GCVE-0-2017-15345)

Vulnerability from cvelistv5

Published

2018-02-15 16:00

Modified

2024-08-05 19:50

Severity ?

CWE

Summary

Huawei Smartphones with software LON-L29DC721B186 have a denial of service vulnerability. An attacker could make an loop exit condition that cannot be reached by sending the crafted 3GPP message. Successful exploit could cause the device to reboot.

References

▼	URL	Tags
	http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-01-smartphone-en	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Huawei Technologies Co., Ltd.	LON-L29D	Version: LON-L29DC721B186

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T19:50:16.684Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-01-smartphone-en"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "LON-L29D",
          "vendor": "Huawei Technologies Co., Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "LON-L29DC721B186"
            }
          ]
        }
      ],
      "datePublic": "2017-11-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Huawei Smartphones with software LON-L29DC721B186 have a denial of service vulnerability. An attacker could make an loop exit condition that cannot be reached by sending the crafted 3GPP message. Successful exploit could cause the device to reboot."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "DoS",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-02-15T15:57:02",
        "orgId": "25ac1063-e409-4190-8079-24548c77ea2e",
        "shortName": "huawei"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-01-smartphone-en"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@huawei.com",
          "ID": "CVE-2017-15345",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "LON-L29D",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "LON-L29DC721B186"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Huawei Technologies Co., Ltd."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Huawei Smartphones with software LON-L29DC721B186 have a denial of service vulnerability. An attacker could make an loop exit condition that cannot be reached by sending the crafted 3GPP message. Successful exploit could cause the device to reboot."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "DoS"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-01-smartphone-en",
              "refsource": "CONFIRM",
              "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-01-smartphone-en"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "25ac1063-e409-4190-8079-24548c77ea2e",
    "assignerShortName": "huawei",
    "cveId": "CVE-2017-15345",
    "datePublished": "2018-02-15T16:00:00",
    "dateReserved": "2017-10-14T00:00:00",
    "dateUpdated": "2024-08-05T19:50:16.684Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted