Lucene search
Huawei TechnologiesHUAWEI-SA-20190814-01-MOBILEHistoryAug 14, 2019 - 12:00 a.m.
Two Denial of Service Vulnerabilities on Some Huawei Smartphones
2019-08-1400:00:00
Huawei Technologies
www.huawei.com
69
CVSS2
2.9
Attack Vector
ADJACENT_NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:A/AC:M/Au:N/C:N/I:N/A:P
CVSS3
5.3
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
25.7%
There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause an infinite loop and the device to reboot. (Vulnerability ID: HWPSIRT-2019-05093 and HWPSIRT-2019-05095)
The two vulnerabilities have been assigned two Common Vulnerabilities and Exposures (CVE) IDs: CVE-2019-5302 and CVE-2019-5303.
Huawei has released software updates to fix these vulnerabilities. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190814-01-mobile-en
Affected configurations
Node
huaweialp-al00b_firmwareMatch8.0.0.153
ORhuaweialp-l09_firmwareMatch8.0.0.153
ORhuaweialp-l29_firmwareMatch8.0.0.145
ORhuaweibla-al00b_firmwareRange<9.1.0.333
ORhuaweibla-l29c_firmwareMatch8.0.0.146
ORhuaweibla-l29c_firmwareMatch8.0.0.158
ORhuaweibla-l29c_firmwareRange<9.1.0.302
ORhuaweiberkeley-al20_firmwareRange<9.1.0.333
ORhuaweiberkeley-l09_firmwareMatch8.0.0.172
ORhuaweiberkeley-l09_firmwareMatch8.0.0.172
ORhuaweiberkeley-l09_firmwareMatch8.0.0.173
ORhuaweicharlotte-l09c_firmwareMatch8.1.0.128a
ORhuaweicharlotte-l09c_firmwareMatch8.1.0.128a
ORhuaweicharlotte-l29c_firmwareMatch8.1.0.157
ORhuaweicharlotte-l29c_firmwareMatch8.1.0.158
ORhuaweicharlotte-l29c_firmwareMatch8.1.0.161
ORhuaweicharlotte-l29c_firmwareMatch8.1.0.162
ORhuaweicolumbia-al10b_firmwareRange<9.1.0.333
ORhuaweicolumbia-l29d_firmwareMatch8.1.0.146
ORhuaweicolumbia-l29d_firmwareMatch8.1.0.148
ORhuaweicolumbia-l29d_firmwareMatch8.1.0.151
ORhuaweicolumbia-l29d_firmwareMatch8.1.0.151
ORhuaweicornell-al00a_firmwareMatch8.2.0.151
ORhuaweicornell-l29a_firmwareMatch8.2.0.131
ORhuaweicornell-l29a_firmwareMatch8.2.0.132
ORhuaweicornell-l29a_firmwareMatch8.2.0.132
ORhuaweicornell-l29a_firmwareMatch8.2.0.133
ORhuaweiemily-l09c_firmwareMatch8.1.0.155
ORhuaweiemily-l09c_firmwareMatch8.1.0.156
ORhuaweiemily-l09c_firmwareMatch8.1.0.172
ORhuaweiemily-l29c_firmwareMatch8.1.0.156
ORhuaweiemily-l29c_firmwareMatch8.1.0.159
ORhuaweiemily-l29c_firmwareMatch8.1.0.166
ORhuaweiemily-l29c_firmwareRange<9.1.0.311
ORhuaweiever-l29b_firmwareMatch9.0.0.206
ORhuaweiever-l29b_firmwareMatch9.0.0.207
ORhuaweiever-l29b_firmwareMatch9.0.0.208
ORhuaweimate_20_firmwareRange<9.1.0.131
ORhuaweimate_20_firmwareRange<9.1.0.135
ORhuaweimate_20_pro_firmwareRange<9.1.0.310
ORhuaweimate_20_pro_firmwareRange<9.1.0.310
ORhuaweimate_20_pro_firmwareRange<9.1.0.310
ORhuaweimate_20_pro_firmwareRange<9.1.0.310
ORhuaweimate_20_pro_firmwareRange<9.1.0.310
ORhuaweimate_20_pro_firmwareRange<9.1.0.310
ORhuaweimate_20_pro_firmwareRange<9.1.0.310
ORhuaweimate_20_pro_firmwareRange<9.1.0.310
ORhuaweimate_20_pro_firmwareRange<9.1.0.311
ORhuaweimate_20_rs_firmwareRange<9.1.0.135
ORhuaweimate_20_x_firmwareRange<9.1.0.135
ORhuaweip_smart_2019_firmwareRange<9.1.0.264
ORhuaweip20_firmwareRange<9.1.0.333
ORhuaweip20_pro_firmwareRange<9.1.0.333
ORhuaweip30_firmwareRange<9.1.0.193
ORhuaweip30_pro_firmwareRange<9.1.0.186
ORhuaweiy9_2019_firmwareRange<9.1.0.220
ORhuaweinova_3_firmwareRange<9.1.0.333
ORhuaweinova_lite_3_firmwareRange<9.1.0.305
ORhuaweiharry-al00c_firmwareRange<9.1.0.217
ORhuaweiharry-al10b_firmwareRange<9.1.0.217
ORhuaweihonor_10_lite_firmwareRange<9.1.0.273
ORhuaweihonor_10_lite_firmwareRange<9.1.0.280
ORhuaweihonor_10_lite_firmwareRange<9.1.0.280
ORhuaweihonor_10_lite_firmwareRange<9.1.0.283
ORhuaweihonor_8x_firmwareRange<9.1.0.217
ORhuaweihonor_8x_firmwareRange<9.1.0.217
ORhuaweihonor_8x_firmwareRange<9.1.0.218
ORhuaweihonor_8x_firmwareRange<9.1.0.219
ORhuaweihonor_8x_firmwareRange<9.1.0.221
ORhuaweihonor_view_20_firmwareRange<9.1.0.235
ORhuaweihonor_view_20_firmwareRange<9.1.0.238
ORhuaweijackman-al00d_firmwareRange<9.1.0.213
ORhuaweijackman-l22_firmwareMatch8.2.0.156
ORhuaweivicky-al00c_firmwareRange<9.1.0.210
ORhuaweijohnson-al10c_firmwareRange<9.1.0.210
ORhuaweijohnson-tl00d_firmwareRange<9.1.0.223
ORhuaweijohnson-tl00f_firmwareRange<9.1.0.223
ORhuaweilaya-al00ep_firmwareRange<9.1.0.135
ORhuaweiparis-l21b_firmwareMatch8.2.0.130
ORhuaweiparis-l21meb_firmwareMatch8.2.0.135
ORhuaweiparis-l29b_firmwareMatch8.2.0.137
ORhuaweipotter-al00c_firmwareRange<9.1.0.217
ORhuaweipotter-al10a_firmwareRange<9.1.0.217
ORhuaweiprinceton-al10b_firmwareRange<9.1.0.233
ORhuaweiprinceton-al10d_firmwareRange<9.1.0.234
ORhuaweisydney-al00_firmwareMatch8.2.0.157
ORhuaweisydney-l21_firmwareMatch8.2.0.108
ORhuaweisydney-l21_firmwareMatch8.2.0.137
ORhuaweisydney-l21br_firmwareMatch8.2.0.130
ORhuaweisydney-l22_firmwareMatch8.2.0.138
ORhuaweisydney-l22br_firmwareMatch8.2.0.133
ORhuaweisydneym-al00_firmwareRange<9.1.0.228
ORhuaweisydneym-l01_firmwareMatch8.2.0.132
ORhuaweisydneym-l01_firmwareMatch8.2.0.133
ORhuaweisydneym-l01_firmwareMatch8.2.0.143
ORhuaweisydneym-l03_firmwareMatch8.2.0.135
ORhuaweisydneym-l21_firmwareMatch8.2.0.134
ORhuaweisydneym-l21_firmwareMatch8.2.0.144
ORhuaweisydneym-l22_firmwareMatch8.2.0.132
ORhuaweisydneym-l22_firmwareMatch8.2.0.132
ORhuaweisydneym-l22_firmwareMatch8.2.0.142
ORhuaweisydneym-l23_firmwareMatch8.2.0.134
ORhuaweitony-al00b_firmwareRange<10.0.0.187
ORhuaweitony-tl00b_firmwareRange<10.0.0.187
ORhuaweiyale-al00a_firmwareRange<9.1.0.152
ORhuaweiyale-l21a_firmwareMatch9.1.0.107
ORhuaweiyale-l21a_firmwareMatch9.1.0.107
ORhuaweiyale-l21a_firmwareMatch9.1.0.107
ORhuaweiyale-l21a_firmwareMatch9.1.0.107
ORhuaweiyale-l21a_firmwareMatch9.1.0.107
ORhuaweiharry-al00c_firmwareRange<9.1.0.217
ORhuaweijackman-l23_firmwareRange<9.1.0.213
ORhuaweipotter-al00c_firmwareRange<9.1.0.217
ORhuaweipotter-al10a_firmwareRange<9.1.0.217
ORhuaweiyale-al00a_firmwareRange<9.1.0.152
ORhuaweihonor_8x_firmwareRange<9.1.0.210
ORhuaweihonor_8x_firmwareRange<9.1.0.223
ORhuaweihonor_magic2_firmwareRange<10.0.0.187
ORhuaweihonor_v20_firmwareRange<9.1.0.233
ORhuaweihonor_v20_firmwareRange<9.1.0.234
| Vendor | Product | Version | CPE |
|---|---|---|---|
| huawei | alp-al00b_firmware | 8.0.0.153 | cpe:2.3:o:huawei:alp-al00b_firmware:8.0.0.153:*:*:*:*:*:*:* |
| huawei | alp-l09_firmware | 8.0.0.153 | cpe:2.3:o:huawei:alp-l09_firmware:8.0.0.153:*:*:*:*:*:*:* |
| huawei | alp-l29_firmware | 8.0.0.145 | cpe:2.3:o:huawei:alp-l29_firmware:8.0.0.145:*:*:*:*:*:*:* |
| huawei | bla-al00b_firmware | * | cpe:2.3:o:huawei:bla-al00b_firmware:*:*:*:*:*:*:*:* |
| huawei | bla-l29c_firmware | 8.0.0.146 | cpe:2.3:o:huawei:bla-l29c_firmware:8.0.0.146:*:*:*:*:*:*:* |
| huawei | bla-l29c_firmware | 8.0.0.158 | cpe:2.3:o:huawei:bla-l29c_firmware:8.0.0.158:*:*:*:*:*:*:* |
| huawei | bla-l29c_firmware | * | cpe:2.3:o:huawei:bla-l29c_firmware:*:*:*:*:*:*:*:* |
| huawei | berkeley-al20_firmware | * | cpe:2.3:o:huawei:berkeley-al20_firmware:*:*:*:*:*:*:*:* |
| huawei | berkeley-l09_firmware | 8.0.0.172 | cpe:2.3:o:huawei:berkeley-l09_firmware:8.0.0.172:*:*:*:*:*:*:* |
| huawei | berkeley-l09_firmware | 8.0.0.173 | cpe:2.3:o:huawei:berkeley-l09_firmware:8.0.0.173:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2019-5303
2020-04-27 20:15:12
CVE-2019-5302
2020-04-27 20:15:12
nvd
nvd
CVE-2019-5303
2020-04-27 20:15:12
CVE-2019-5302
2020-04-27 20:15:12
prion
prion
Input validation
2020-04-27 20:15:00
Input validation
2020-04-27 20:15:00
cvelist
cvelist
CVE-2019-5303
2020-04-27 20:01:02
CVE-2019-5302
2020-04-27 19:50:50
CVSS2
2.9
Attack Vector
ADJACENT_NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:A/AC:M/Au:N/C:N/I:N/A:P
CVSS3
5.3
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
25.7%
Related for HUAWEI-SA-20190814-01-MOBILE