var-201809-0051
Vulnerability from variot
In Snapdragon (Automobile ,Mobile) in version MSM8996AU, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, Snapdragon_High_Med_2016, a crafted HLOS client can modify the structure in memory passed to a QSEE application between the time of check and the time of use, resulting in arbitrary writes to TZ kernel memory regions. Snapdragon (Automobile and Mobile) Contains a race condition vulnerability.Information may be tampered with. Qualcomm MSM8996AU, etc. are the central processing unit (CPU) products of Qualcomm (Qualcomm) for different platforms. A security vulnerability exists in Ontario_Driver_loctl in several Qualcomm Snapdragon products. An attacker can use a specially crafted HLOS client to exploit this vulnerability to change the frame in memory, thereby writing arbitrary content to the TZ kernel memory area. The following products (automotive and mobile) are affected: Qualcomm MSM8996AU; SD 425; SD 427; SD 430; SD 435; SD 450; SD 625; SD 650/52; SD 820; SD 820A; SD 835; SDM439; SDM630; SDM632; SDM636; SDM660; Snapdragon_High_Med_2016
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201809-0051", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "sdm439", "scope": "eq", "trust": 1.6, "vendor": "qualcomm", "version": null }, { "model": "sda660", "scope": "eq", "trust": 1.6, "vendor": "qualcomm", "version": null }, { "model": "sdm636", "scope": "eq", "trust": 1.6, "vendor": "qualcomm", "version": null }, { "model": "sdm660", "scope": "eq", "trust": 1.6, "vendor": "qualcomm", "version": null }, { "model": "sdm632", "scope": "eq", "trust": 1.6, "vendor": "qualcomm", "version": null }, { "model": "sd820a", "scope": "eq", "trust": 1.6, "vendor": "qualcomm", "version": null }, { "model": "sdm429", "scope": "eq", "trust": 1.6, "vendor": "qualcomm", "version": null }, { "model": "sd835", "scope": "eq", "trust": 1.6, "vendor": "qualcomm", "version": null }, { "model": "sd820", "scope": "eq", "trust": 1.6, "vendor": "qualcomm", "version": null }, { "model": "sdm630", "scope": "eq", "trust": 1.6, "vendor": "qualcomm", "version": null }, { "model": "msm8996au", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sd435", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sd652", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sd427", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sd625", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sd650", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sd450", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sd425", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sd430", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "msm8996au", "scope": null, "trust": 0.8, "vendor": "qualcomm", "version": null }, { "model": "sd 425", "scope": null, "trust": 0.8, "vendor": "qualcomm", "version": null }, { "model": "sd 427", "scope": null, "trust": 0.8, "vendor": "qualcomm", "version": null }, { "model": "sd 430", "scope": null, "trust": 0.8, "vendor": "qualcomm", "version": null }, { "model": "sd 435", "scope": null, "trust": 0.8, "vendor": "qualcomm", "version": null }, { "model": "sd 450", "scope": null, "trust": 0.8, "vendor": "qualcomm", "version": null }, { "model": "sd 625", "scope": null, "trust": 0.8, "vendor": "qualcomm", "version": null }, { "model": "sd 650", "scope": null, "trust": 0.8, "vendor": "qualcomm", "version": null }, { "model": "sd 652", "scope": null, "trust": 0.8, "vendor": "qualcomm", "version": null }, { "model": "sd 820", "scope": null, "trust": 0.8, "vendor": "qualcomm", "version": null }, { "model": "sd 820a", "scope": null, "trust": 0.8, "vendor": "qualcomm", "version": null }, { "model": "sd 835", "scope": null, "trust": 0.8, "vendor": "qualcomm", "version": null }, { "model": "sda 660", "scope": null, "trust": 0.8, "vendor": "qualcomm", "version": null }, { "model": "sdm 429", "scope": null, "trust": 0.8, "vendor": "qualcomm", "version": null }, { "model": "sdm 439", "scope": null, "trust": 0.8, "vendor": "qualcomm", "version": null }, { "model": "sdm 630", "scope": null, "trust": 0.8, "vendor": "qualcomm", "version": null }, { "model": "sdm 632", "scope": null, "trust": 0.8, "vendor": "qualcomm", "version": null }, { "model": "sdm 636", "scope": null, "trust": 0.8, "vendor": "qualcomm", "version": null }, { "model": "sdm 660", "scope": null, "trust": 0.8, "vendor": "qualcomm", "version": null } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2017-014292" }, { "db": "CNNVD", "id": "CNNVD-201809-973" }, { "db": "NVD", "id": "CVE-2017-18302" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "cpe_match": [ { "cpe22Uri": "cpe:/o:qualcomm:msm8996au_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:qualcomm:sd_425_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:qualcomm:sd_427_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:qualcomm:sd_430_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:qualcomm:sd_435_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:qualcomm:sd_450_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:qualcomm:sd_625_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:qualcomm:sd_650_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:qualcomm:sd_652_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:qualcomm:sd_820_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:qualcomm:sd_820a_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:qualcomm:sd_835_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:qualcomm:sda_660_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:qualcomm:sdm_429_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:qualcomm:sdm_439_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:qualcomm:sdm_630_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:qualcomm:sdm_632_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:qualcomm:sdm_636_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:qualcomm:sdm_660_firmware", "vulnerable": true } ], "operator": "OR" } ] } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2017-014292" } ] }, "cve": "CVE-2017-18302", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "author": "nvd@nist.gov", "availabilityImpact": "NONE", "baseScore": 4.7, "confidentialityImpact": "NONE", "exploitabilityScore": 3.4, "id": "CVE-2017-18302", "impactScore": 6.9, "integrityImpact": "COMPLETE", "severity": "MEDIUM", "trust": 1.9, "vectorString": "AV:L/AC:M/Au:N/C:N/I:C/A:N", "version": "2.0" }, { "accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "author": "VULHUB", "availabilityImpact": "NONE", "baseScore": 4.7, "confidentialityImpact": "NONE", "exploitabilityScore": 3.4, "id": "VHN-109411", "impactScore": 6.9, "integrityImpact": "COMPLETE", "severity": "MEDIUM", "trust": 0.1, "vectorString": "AV:L/AC:M/AU:N/C:N/I:C/A:N", "version": "2.0" } ], "cvssV3": [ { "attackComplexity": "HIGH", "attackVector": "LOCAL", "author": "nvd@nist.gov", "availabilityImpact": "NONE", "baseScore": 4.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "exploitabilityScore": 1.0, "id": "CVE-2017-18302", "impactScore": 3.6, "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "trust": 1.8, "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N", "version": "3.0" } ], "severity": [ { "author": "nvd@nist.gov", "id": "CVE-2017-18302", "trust": 1.0, "value": "MEDIUM" }, { "author": "NVD", "id": "CVE-2017-18302", "trust": 0.8, "value": "Medium" }, { "author": "CNNVD", "id": "CNNVD-201809-973", "trust": 0.6, "value": "MEDIUM" }, { "author": "VULHUB", "id": "VHN-109411", "trust": 0.1, "value": "MEDIUM" }, { "author": "VULMON", "id": "CVE-2017-18302", "trust": 0.1, "value": "MEDIUM" } ] } ], "sources": [ { "db": "VULHUB", "id": "VHN-109411" }, { "db": "VULMON", "id": "CVE-2017-18302" }, { "db": "JVNDB", "id": "JVNDB-2017-014292" }, { "db": "CNNVD", "id": "CNNVD-201809-973" }, { "db": "NVD", "id": "CVE-2017-18302" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "In Snapdragon (Automobile ,Mobile) in version MSM8996AU, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, Snapdragon_High_Med_2016, a crafted HLOS client can modify the structure in memory passed to a QSEE application between the time of check and the time of use, resulting in arbitrary writes to TZ kernel memory regions. Snapdragon (Automobile and Mobile) Contains a race condition vulnerability.Information may be tampered with. Qualcomm MSM8996AU, etc. are the central processing unit (CPU) products of Qualcomm (Qualcomm) for different platforms. A security vulnerability exists in Ontario_Driver_loctl in several Qualcomm Snapdragon products. An attacker can use a specially crafted HLOS client to exploit this vulnerability to change the frame in memory, thereby writing arbitrary content to the TZ kernel memory area. The following products (automotive and mobile) are affected: Qualcomm MSM8996AU; SD 425; SD 427; SD 430; SD 435; SD 450; SD 625; SD 650/52; SD 820; SD 820A; SD 835; SDM439; SDM630; SDM632; SDM636; SDM660; Snapdragon_High_Med_2016", "sources": [ { "db": "NVD", "id": "CVE-2017-18302" }, { "db": "JVNDB", "id": "JVNDB-2017-014292" }, { "db": "VULHUB", "id": "VHN-109411" }, { "db": "VULMON", "id": "CVE-2017-18302" } ], "trust": 1.8 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2017-18302", "trust": 2.6 }, { "db": "SECTRACK", "id": "1041432", "trust": 1.2 }, { "db": "JVNDB", "id": "JVNDB-2017-014292", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-201809-973", "trust": 0.7 }, { "db": "VULHUB", "id": "VHN-109411", "trust": 0.1 }, { "db": "VULMON", "id": "CVE-2017-18302", "trust": 0.1 } ], "sources": [ { "db": "VULHUB", "id": "VHN-109411" }, { "db": "VULMON", "id": "CVE-2017-18302" }, { "db": "JVNDB", "id": "JVNDB-2017-014292" }, { "db": "CNNVD", "id": "CNNVD-201809-973" }, { "db": "NVD", "id": "CVE-2017-18302" } ] }, "id": "VAR-201809-0051", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "VULHUB", "id": "VHN-109411" } ], "trust": 0.01 }, "last_update_date": "2024-11-23T20:11:37.755000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "Android \u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306b\u95a2\u3059\u308b\u516c\u958b\u60c5\u5831 - 2018 \u5e74 8 \u6708", "trust": 0.8, "url": "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components" }, { "title": "September 2018 Qualcomm Technologies, Inc. Security Bulletin", "trust": 0.8, "url": "https://www.qualcomm.com/company/product-security/bulletins" }, { "title": "Multiple Qualcomm Snapdragon Product security vulnerabilities", "trust": 0.6, "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=85086" }, { "title": "Android Security Bulletins: Android Security Bulletin\u2014August 2018", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=android_security_bulletins\u0026qid=746dc14fcd3f5e139648cfdc9d9039a9" }, { "title": "SamsungReleaseNotes", "trust": 0.1, "url": "https://github.com/samreleasenotes/SamsungReleaseNotes " } ], "sources": [ { "db": "VULMON", "id": "CVE-2017-18302" }, { "db": "JVNDB", "id": "JVNDB-2017-014292" }, { "db": "CNNVD", "id": "CNNVD-201809-973" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-362", "trust": 1.9 } ], "sources": [ { "db": "VULHUB", "id": "VHN-109411" }, { "db": "JVNDB", "id": "JVNDB-2017-014292" }, { "db": "NVD", "id": "CVE-2017-18302" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 1.8, "url": "https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components" }, { "trust": 1.8, "url": "https://www.qualcomm.com/company/product-security/bulletins" }, { "trust": 1.2, "url": "http://www.securitytracker.com/id/1041432" }, { "trust": 0.8, "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-18302" }, { "trust": 0.8, "url": "https://nvd.nist.gov/vuln/detail/cve-2017-18302" }, { "trust": 0.1, "url": "https://cwe.mitre.org/data/definitions/362.html" }, { "trust": 0.1, "url": "https://nvd.nist.gov" }, { "trust": 0.1, "url": "https://source.android.com/security/bulletin/2018-08-01.html" }, { "trust": 0.1, "url": "https://github.com/samreleasenotes/samsungreleasenotes" } ], "sources": [ { "db": "VULHUB", "id": "VHN-109411" }, { "db": "VULMON", "id": "CVE-2017-18302" }, { "db": "JVNDB", "id": "JVNDB-2017-014292" }, { "db": "CNNVD", "id": "CNNVD-201809-973" }, { "db": "NVD", "id": "CVE-2017-18302" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "VULHUB", "id": "VHN-109411" }, { "db": "VULMON", "id": "CVE-2017-18302" }, { "db": "JVNDB", "id": "JVNDB-2017-014292" }, { "db": "CNNVD", "id": "CNNVD-201809-973" }, { "db": "NVD", "id": "CVE-2017-18302" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2018-09-20T00:00:00", "db": "VULHUB", "id": "VHN-109411" }, { "date": "2018-09-20T00:00:00", "db": "VULMON", "id": "CVE-2017-18302" }, { "date": "2018-12-25T00:00:00", "db": "JVNDB", "id": "JVNDB-2017-014292" }, { "date": "2018-09-21T00:00:00", "db": "CNNVD", "id": "CNNVD-201809-973" }, { "date": "2018-09-20T13:29:00.510000", "db": "NVD", "id": "CVE-2017-18302" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2018-11-23T00:00:00", "db": "VULHUB", "id": "VHN-109411" }, { "date": "2018-11-23T00:00:00", "db": "VULMON", "id": "CVE-2017-18302" }, { "date": "2018-12-25T00:00:00", "db": "JVNDB", "id": "JVNDB-2017-014292" }, { "date": "2018-09-21T00:00:00", "db": "CNNVD", "id": "CNNVD-201809-973" }, { "date": "2024-11-21T03:19:48.723000", "db": "NVD", "id": "CVE-2017-18302" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "local", "sources": [ { "db": "CNNVD", "id": "CNNVD-201809-973" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Snapdragon Race condition vulnerability", "sources": [ { "db": "JVNDB", "id": "JVNDB-2017-014292" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "competitive condition", "sources": [ { "db": "CNNVD", "id": "CNNVD-201809-973" } ], "trust": 0.6 } }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.