Sign-up

ID

VAR-201702-0392


CVE

CVE-2016-4546


TITLE

Samsung Mobile Phones Denial of Service Vulnerability

Trust: 1.2

sources: CNVD: CNVD-2016-05517 // CNNVD: CNNVD-201607-580

DESCRIPTION

Samsung devices with Android KK(4.4) or L(5.0/5.1) allow local users to cause a denial of service (IAndroidShm service crash) via crafted data in a service call. Samsung Mobile Phone is a smart phone released by Samsung in South Korea. An attacker could use this vulnerability to cause a denial of service. The following products and versions are affected: Samsung Mobile Phones 4.4, 5.0, 5.1. Remote attackers can exploit this issue to cause a denial-of-service condition

Trust: 3.51

sources: NVD: CVE-2016-4546 // JVNDB: JVNDB-2016-007541 // CNVD: CNVD-2016-05517 // CNVD: CNVD-2016-02880 // CNNVD: CNNVD-201607-580 // BID: 90104

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 1.2

sources: CNVD: CNVD-2016-05517 // CNVD: CNVD-2016-02880

AFFECTED PRODUCTS

vendor:samsungmodel:mobilescope:eqversion:5.1

Trust: 1.9

vendor:samsungmodel:mobilescope:eqversion:5.0

Trust: 1.9

vendor:samsungmodel:mobilescope:eqversion:4.4

Trust: 1.9

vendor:samsungmodel:mobilescope: - version: -

Trust: 0.8

vendor:samsungmodel:mobile phonesscope:eqversion:4.4

Trust: 0.6

vendor:samsungmodel:mobile phonesscope:eqversion:5.0

Trust: 0.6

vendor:samsungmodel:mobile phonesscope:eqversion:5.1

Trust: 0.6

vendor:samsungmodel:android phonescope: - version: -

Trust: 0.6

vendor:samsungmodel:mobilescope:eqversion: -

Trust: 0.3

sources: CNVD: CNVD-2016-05517 // CNVD: CNVD-2016-02880 // BID: 90104 // JVNDB: JVNDB-2016-007541 // CNNVD: CNNVD-201605-158 // NVD: CVE-2016-4546

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2016-4546
value: MEDIUM

Trust: 1.0

NVD: CVE-2016-4546
value: MEDIUM

Trust: 0.8

CNVD: CNVD-2016-05517
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2016-02880
value: LOW

Trust: 0.6

CNNVD: CNNVD-201605-158
value: LOW

Trust: 0.6

nvd@nist.gov: CVE-2016-4546
severity: LOW
baseScore: 2.1
vectorString: AV:L/AC:L/AU:N/C:N/I:N/A:P
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 3.9
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

CNVD: CNVD-2016-05517
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

CNVD: CNVD-2016-02880
severity: LOW
baseScore: 2.1
vectorString: AV:L/AC:L/AU:N/C:N/I:N/A:P
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 3.9
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

nvd@nist.gov: CVE-2016-4546
baseSeverity: MEDIUM
baseScore: 5.5
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 3.6
version: 3.0

Trust: 1.8

sources: CNVD: CNVD-2016-05517 // CNVD: CNVD-2016-02880 // JVNDB: JVNDB-2016-007541 // CNNVD: CNNVD-201605-158 // NVD: CVE-2016-4546

PROBLEMTYPE DATA

problemtype:CWE-20

Trust: 1.8

sources: JVNDB: JVNDB-2016-007541 // NVD: CVE-2016-4546

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201607-580

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-201607-580

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2016-007541

PATCH
title:SVE-2015-5133: IAndroidShm IAPAService service DoSurl:http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2016
Trust: 0.8
title:SamsungMobilePhones denial of service vulnerability patchurl:https://www.cnvd.org.cn/patchInfo/show/79789
Trust: 0.6
title:Samsumgandroidphone denial of service vulnerability patchurl:https://www.cnvd.org.cn/patchInfo/show/75390
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2016-05517 // 
            
            
            
            CNVD: CNVD-2016-02880 // 
            
            
            
            JVNDB: JVNDB-2016-007541

EXTERNAL IDS
db:NVDid:CVE-2016-4546
Trust: 3.3
db:OPENWALLid:OSS-SECURITY/2016/05/06/1
Trust: 2.4
db:BIDid:90104
Trust: 1.5
db:JVNDBid:JVNDB-2016-007541
Trust: 0.8
db:CNVDid:CNVD-2016-05517
Trust: 0.6
db:CNVDid:CNVD-2016-02880
Trust: 0.6
db:CNNVDid:CNNVD-201607-580
Trust: 0.6
db:CNNVDid:CNNVD-201605-158
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2016-05517 // 
            
            
            
            CNVD: CNVD-2016-02880 // 
            
            
            
            BID: 90104 // 
            
            
            
            JVNDB: JVNDB-2016-007541 // 
            
            
            
            CNNVD: CNNVD-201607-580 // 
            
            
            
            CNNVD: CNNVD-201605-158 // 
            
            
            
            NVD: CVE-2016-4546

REFERENCES
url:http://www.openwall.com/lists/oss-security/2016/05/06/1
Trust: 2.4
url:http://security.samsungmobile.com/smrupdate.html#smr-jan-2016
Trust: 1.9
url:http://www.securityfocus.com/bid/90104
Trust: 1.2
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-4546
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-4546
Trust: 0.8
url:http://security.samsungmobile.com/smrupdate.html#smr
Trust: 0.6
url:http://www.samsung.com/
Trust: 0.3
url:http://seclists.org/oss-sec/2016/q2/253
Trust: 0.3
sources:
            
            
            CNVD: CNVD-2016-05517 // 
            
            
            
            CNVD: CNVD-2016-02880 // 
            
            
            
            BID: 90104 // 
            
            
            
            JVNDB: JVNDB-2016-007541 // 
            
            
            
            CNNVD: CNNVD-201607-580 // 
            
            
            
            CNNVD: CNNVD-201605-158 // 
            
            
            
            NVD: CVE-2016-4546

CREDITS
Vinc3nt4H of Alibaba Mobile Security Team
Trust: 0.9
sources:
            
            
            BID: 90104 // 
            
            
            
            CNNVD: CNNVD-201607-580

SOURCES
db:CNVDid:CNVD-2016-05517
db:CNVDid:CNVD-2016-02880
db:BIDid:90104
db:JVNDBid:JVNDB-2016-007541
db:CNNVDid:CNNVD-201607-580
db:CNNVDid:CNNVD-201605-158
db:NVDid:CVE-2016-4546

LAST UPDATE DATE
2024-11-23T22:07:39.119000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2016-05517date:2016-07-27T00:00:00
db:CNVDid:CNVD-2016-02880date:2016-05-10T00:00:00
db:BIDid:90104date:2017-03-07T02:06:00
db:JVNDBid:JVNDB-2016-007541date:2017-03-06T00:00:00
db:CNNVDid:CNNVD-201607-580date:2016-07-20T00:00:00
db:CNNVDid:CNNVD-201605-158date:2016-05-06T00:00:00
db:NVDid:CVE-2016-4546date:2024-11-21T02:52:27.363

SOURCES RELEASE DATE
db:CNVDid:CNVD-2016-05517date:2016-07-27T00:00:00
db:CNVDid:CNVD-2016-02880date:2016-05-10T00:00:00
db:BIDid:90104date:2016-05-05T00:00:00
db:JVNDBid:JVNDB-2016-007541date:2017-03-06T00:00:00
db:CNNVDid:CNNVD-201607-580date:2016-05-05T00:00:00
db:CNNVDid:CNNVD-201605-158date:2015-10-30T00:00:00
db:NVDid:CVE-2016-4546date:2017-02-13T18:59:00.550