Details of VAR-201809-0050

ID

VAR-201809-0050

CVE

CVE-2017-18301

TITLE

plural Snapdragon In product NULL Pointer dereference vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2017-014291

DESCRIPTION

In Small Cell SoC and Snapdragon (Automobile, Mobile, Wear) in version FSM9055, FSM9955, MDM9607, MDM9640, MDM9650, MSM8909W, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDM630, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016, providing the NULL argument of ICE regulator while processing create key IOCTL results in system restart. Snapdragon (Automobile , Mobile , Wear) Is NULL A vulnerability related to pointer dereference exists.Service operation interruption (DoS) There is a possibility of being put into a state. Qualcomm FSM9055, etc. are the central processing unit (CPU) products of Qualcomm (Qualcomm) applied to different platforms. Security flaws exist in several Qualcomm products. Currently there is no information about this vulnerability, please keep an eye on CNNVD or vendor announcements

Trust: 1.8

sources: NVD: CVE-2017-18301 // JVNDB: JVNDB-2017-014291 // VULHUB: VHN-109410 // VULMON: CVE-2017-18301

AFFECTED PRODUCTS

vendor:	qualcomm	model:	sd845	scope:	eq	version:	-	Trust: 1.6
vendor:	qualcomm	model:	sdm636	scope:	eq	version:	-	Trust: 1.6
vendor:	qualcomm	model:	sdm660	scope:	eq	version:	-	Trust: 1.6
vendor:	qualcomm	model:	sd650	scope:	eq	version:	-	Trust: 1.6
vendor:	qualcomm	model:	sd820a	scope:	eq	version:	-	Trust: 1.6
vendor:	qualcomm	model:	sd652	scope:	eq	version:	-	Trust: 1.6
vendor:	qualcomm	model:	sd835	scope:	eq	version:	-	Trust: 1.6
vendor:	qualcomm	model:	sd820	scope:	eq	version:	-	Trust: 1.6
vendor:	qualcomm	model:	sdx20	scope:	eq	version:	-	Trust: 1.6
vendor:	qualcomm	model:	sdm630	scope:	eq	version:	-	Trust: 1.6
vendor:	qualcomm	model:	sd617	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	fsm9955	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd435	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9607	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9650	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd427	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9640	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8909w	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd625	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd450	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd425	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	fsm9055	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd430	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	fsm9055	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	fsm9955	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	mdm9607	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	mdm9640	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	mdm9650	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	mdm9655	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	msm8909w	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sd 425	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sd 427	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sd 430	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sd 435	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sd 450	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sd 617	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sd 625	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sd 650	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sd 652	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sd 820	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sd 820a	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sd 835	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sd 845	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sdm 630	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sdm 636	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sdm 660	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sdx20	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2017-014291 // CNNVD: CNNVD-201809-974 // NVD: CVE-2017-18301

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2017-18301
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2017-18301
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-201809-974
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-109410
value:	MEDIUM
Trust: 0.1
VULMON:	CVE-2017-18301
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2017-18301
severity:	MEDIUM
baseScore:	4.9
vectorString:	AV:L/AC:L/AU:N/C:N/I:N/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.9
VULHUB:	VHN-109410
severity:	MEDIUM
baseScore:	4.9
vectorString:	AV:L/AC:L/AU:N/C:N/I:N/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2017-18301
baseSeverity:	MEDIUM
baseScore:	5.5
vectorString:	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	3.6
version:	3.0
Trust: 1.8

sources: VULHUB: VHN-109410 // VULMON: CVE-2017-18301 // JVNDB: JVNDB-2017-014291 // CNNVD: CNNVD-201809-974 // NVD: CVE-2017-18301

PROBLEMTYPE DATA

problemtype:

CWE-476

Trust: 1.9

sources: VULHUB: VHN-109410 // JVNDB: JVNDB-2017-014291 // NVD: CVE-2017-18301

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-201809-974

TYPE

lack of information

Trust: 0.6

sources: CNNVD: CNNVD-201809-974

CONFIGURATIONS

sources: JVNDB: JVNDB-2017-014291

PATCH

title:	Android のセキュリティに関する公開情報 - 2018 年 8 月	url:	https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components\	Trust: 0.8
title:	September 2018 Qualcomm Technologies, Inc. Security Bulletin	url:	https://www.qualcomm.com/company/product-security/bulletins	Trust: 0.8
title:	Multiple Qualcomm Product security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=85087	Trust: 0.6
title:	Android Security Bulletins: Android Security Bulletin—August 2018	url:	https://vulmon.com/vendoradvisory?qidtp=android_security_bulletins&qid=746dc14fcd3f5e139648cfdc9d9039a9	Trust: 0.1
title:	SamsungReleaseNotes	url:	https://github.com/samreleasenotes/SamsungReleaseNotes	Trust: 0.1

sources: VULMON: CVE-2017-18301 // JVNDB: JVNDB-2017-014291 // CNNVD: CNNVD-201809-974

EXTERNAL IDS

db:	NVD	id:	CVE-2017-18301	Trust: 2.6
db:	SECTRACK	id:	1041432	Trust: 1.2
db:	JVNDB	id:	JVNDB-2017-014291	Trust: 0.8
db:	CNNVD	id:	CNNVD-201809-974	Trust: 0.7
db:	VULHUB	id:	VHN-109410	Trust: 0.1
db:	VULMON	id:	CVE-2017-18301	Trust: 0.1

sources: VULHUB: VHN-109410 // VULMON: CVE-2017-18301 // JVNDB: JVNDB-2017-014291 // CNNVD: CNNVD-201809-974 // NVD: CVE-2017-18301

REFERENCES

url:	https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components	Trust: 1.8
url:	https://www.qualcomm.com/company/product-security/bulletins	Trust: 1.8
url:	http://www.securitytracker.com/id/1041432	Trust: 1.2
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-18301	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2017-18301	Trust: 0.8
url:	https://cwe.mitre.org/data/definitions/476.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1
url:	https://source.android.com/security/bulletin/2018-08-01.html	Trust: 0.1
url:	https://github.com/samreleasenotes/samsungreleasenotes	Trust: 0.1

sources: VULHUB: VHN-109410 // VULMON: CVE-2017-18301 // JVNDB: JVNDB-2017-014291 // CNNVD: CNNVD-201809-974 // NVD: CVE-2017-18301

SOURCES

db:	VULHUB	id:	VHN-109410
db:	VULMON	id:	CVE-2017-18301
db:	JVNDB	id:	JVNDB-2017-014291
db:	CNNVD	id:	CNNVD-201809-974
db:	NVD	id:	CVE-2017-18301

LAST UPDATE DATE

2024-11-23T21:00:54.010000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-109410	date:	2018-11-23T00:00:00
db:	VULMON	id:	CVE-2017-18301	date:	2018-11-23T00:00:00
db:	JVNDB	id:	JVNDB-2017-014291	date:	2018-12-25T00:00:00
db:	CNNVD	id:	CNNVD-201809-974	date:	2018-09-21T00:00:00
db:	NVD	id:	CVE-2017-18301	date:	2024-11-21T03:19:48.573

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-109410	date:	2018-09-20T00:00:00
db:	VULMON	id:	CVE-2017-18301	date:	2018-09-20T00:00:00
db:	JVNDB	id:	JVNDB-2017-014291	date:	2018-12-25T00:00:00
db:	CNNVD	id:	CNNVD-201809-974	date:	2018-09-21T00:00:00
db:	NVD	id:	CVE-2017-18301	date:	2018-09-20T13:29:00.370