CVEvulnerability

CVE-2017-2717

6.5 MEDIUM Published 2017-11-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-11-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.5 MEDIUM — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
3.3 LOW — AV:A/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-190

Description

honor 8 Pro with software Duke-L09C10B120 and earlier versions,Duke-L09C432B120 and earlier versions,Duke-L09C636B120 and earlier versions has an integer overflow vulnerability. The attacker sends a response message to the device, which contains an illegal length field, it could produce an integer overflow and restart the modem system.

Affected configurations

• huawei honor 8 pro firmware (<= duke-l09c10b120) • huawei honor 8 pro firmware (<= duke-l09c432b120) • huawei honor 8 pro firmware (<= duke-l09c636b120)

Related

Weakness · CWE (1)

  • CWE-190 Integer Overflow or Wraparound weakness

References