Details of VAR-201901-1321

ID

VAR-201901-1321

CVE

CVE-2018-3595

TITLE

plural snapdragon Product error handling vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2018-013787

DESCRIPTION

Anti-rollback can be bypassed in replay scenario during app loading due to improper error handling of RPMB writes in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX24, SXR1130. snapdragon automobile , snapdragon mobile , snapdragon wear Contains an error handling vulnerability.Information may be tampered with. Qualcomm Closed-Source Components are prone to multiple unspecified vulnerabilities. An attacker can exploit these issues to perform unauthorized actions. This may aid in further attacks. These issues are being tracked by Android Bug IDs A-78135902, A-66913713, A-67712316, A-79419833, A-109678200, A-78283451, A-78285196, A-78284194, A-78284753, A-78284517, A-78240177, A-78239686, A-78284545, A-109660689, A-78240324, A-68141338, A-78286046, A-73539037, A-73539235, A-71501115, A-33757308, A-74236942, A-77485184, A-77484529, A-33385206, A-79419639, A-79420511, A-109678338, and A-112279564. Qualcomm MDM9206 and others are products of Qualcomm (Qualcomm). The Qualcomm MDM9206 is a central processing unit (CPU). SDX24 is a modem. TrustZone is one of the system security components. A security vulnerability exists in TrustZone in several Qualcomm products due to improper handling of errors. Attackers can exploit this vulnerability to bypass the anti-rollback protection mechanism

Trust: 2.07

sources: NVD: CVE-2018-3595 // JVNDB: JVNDB-2018-013787 // BID: 106128 // VULHUB: VHN-133626 // VULMON: CVE-2018-3595

AFFECTED PRODUCTS

vendor:	qualcomm	model:	msm8996au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdx24	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 205	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 212	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 650	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sda660	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 835	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 652	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 425	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 710	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 820a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9607	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9650	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 850	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9206	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 845	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 820	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 450	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 670	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sxr1130	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 430	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 210	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 712	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 625	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9206	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	mdm9607	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	mdm9650	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	msm8996au	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sd 205	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sd 210	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sd 212	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sd 425	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sd 430	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sd 450	scope:	-	version:	-	Trust: 0.8
vendor:	google	model:	pixel xl	scope:	eq	version:	0	Trust: 0.3
vendor:	google	model:	pixel c	scope:	eq	version:	0	Trust: 0.3
vendor:	google	model:	pixel	scope:	eq	version:	0	Trust: 0.3
vendor:	google	model:	nexus player	scope:	eq	version:	0	Trust: 0.3
vendor:	google	model:	nexus	scope:	eq	version:	9	Trust: 0.3
vendor:	google	model:	nexus 6p	scope:	-	version:	-	Trust: 0.3
vendor:	google	model:	nexus	scope:	eq	version:	6	Trust: 0.3
vendor:	google	model:	nexus	scope:	eq	version:	5x	Trust: 0.3
vendor:	google	model:	android	scope:	eq	version:	0	Trust: 0.3

sources: BID: 106128 // JVNDB: JVNDB-2018-013787 // NVD: CVE-2018-3595

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2018-3595
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2018-3595
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-201812-424
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-133626
value:	LOW
Trust: 0.1
VULMON:	CVE-2018-3595
value:	LOW
Trust: 0.1

nvd@nist.gov:	CVE-2018-3595
severity:	LOW
baseScore:	2.1
vectorString:	AV:L/AC:L/AU:N/C:N/I:P/A:N
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	3.9
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.9
VULHUB:	VHN-133626
severity:	LOW
baseScore:	2.1
vectorString:	AV:L/AC:L/AU:N/C:N/I:P/A:N
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	3.9
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2018-3595
baseSeverity:	MEDIUM
baseScore:	5.5
vectorString:	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	HIGH
availabilityImpact:	NONE
exploitabilityScore:	1.8
impactScore:	3.6
version:	3.0
Trust: 1.8

sources: VULHUB: VHN-133626 // VULMON: CVE-2018-3595 // JVNDB: JVNDB-2018-013787 // CNNVD: CNNVD-201812-424 // NVD: CVE-2018-3595

PROBLEMTYPE DATA

problemtype:	NVD-CWE-noinfo	Trust: 1.0
problemtype:	CWE-388	Trust: 0.9

sources: VULHUB: VHN-133626 // JVNDB: JVNDB-2018-013787 // NVD: CVE-2018-3595

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-201812-424

TYPE

code problem

Trust: 0.6

sources: CNNVD: CNNVD-201812-424

CONFIGURATIONS

sources: JVNDB: JVNDB-2018-013787

PATCH

title:	December 2018 Qualcomm Technologies, Inc. Security Bulletin	url:	https://www.qualcomm.com/company/product-security/bulletins	Trust: 0.8
title:	Multiple Qualcomm Product security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=87672	Trust: 0.6
title:	Android Security Bulletins: Android Security Bulletin—December 2018	url:	https://vulmon.com/vendoradvisory?qidtp=android_security_bulletins&qid=90af33430b981dd4da141cb90e5f3889	Trust: 0.1

sources: VULMON: CVE-2018-3595 // JVNDB: JVNDB-2018-013787 // CNNVD: CNNVD-201812-424

EXTERNAL IDS

db:	NVD	id:	CVE-2018-3595	Trust: 2.9
db:	BID	id:	106128	Trust: 2.1
db:	JVNDB	id:	JVNDB-2018-013787	Trust: 0.8
db:	CNNVD	id:	CNNVD-201812-424	Trust: 0.7
db:	VULHUB	id:	VHN-133626	Trust: 0.1
db:	VULMON	id:	CVE-2018-3595	Trust: 0.1

sources: VULHUB: VHN-133626 // VULMON: CVE-2018-3595 // BID: 106128 // JVNDB: JVNDB-2018-013787 // CNNVD: CNNVD-201812-424 // NVD: CVE-2018-3595

REFERENCES

url:	http://www.securityfocus.com/bid/106128	Trust: 2.5
url:	https://www.qualcomm.com/company/product-security/bulletins	Trust: 1.8
url:	https://source.android.com/security/bulletin/2018-12-01.html	Trust: 1.0
url:	http://code.google.com/android/	Trust: 0.9
url:	http://www.qualcomm.com/	Trust: 0.9
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-3595	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2018-3595	Trust: 0.8
url:	https://cwe.mitre.org/data/definitions/.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: VULHUB: VHN-133626 // VULMON: CVE-2018-3595 // BID: 106128 // JVNDB: JVNDB-2018-013787 // CNNVD: CNNVD-201812-424 // NVD: CVE-2018-3595

CREDITS

The vendor reported these issues.

Trust: 0.9

sources: BID: 106128 // CNNVD: CNNVD-201812-424

SOURCES

db:	VULHUB	id:	VHN-133626
db:	VULMON	id:	CVE-2018-3595
db:	BID	id:	106128
db:	JVNDB	id:	JVNDB-2018-013787
db:	CNNVD	id:	CNNVD-201812-424
db:	NVD	id:	CVE-2018-3595

LAST UPDATE DATE

2024-11-23T20:46:50.674000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-133626	date:	2020-08-24T00:00:00
db:	VULMON	id:	CVE-2018-3595	date:	2020-08-24T00:00:00
db:	BID	id:	106128	date:	2018-12-03T00:00:00
db:	JVNDB	id:	JVNDB-2018-013787	date:	2019-03-01T00:00:00
db:	CNNVD	id:	CNNVD-201812-424	date:	2020-08-25T00:00:00
db:	NVD	id:	CVE-2018-3595	date:	2024-11-21T04:05:44.170

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-133626	date:	2019-01-18T00:00:00
db:	VULMON	id:	CVE-2018-3595	date:	2019-01-18T00:00:00
db:	BID	id:	106128	date:	2018-12-03T00:00:00
db:	JVNDB	id:	JVNDB-2018-013787	date:	2019-03-01T00:00:00
db:	CNNVD	id:	CNNVD-201812-424	date:	2018-12-11T00:00:00
db:	NVD	id:	CVE-2018-3595	date:	2019-01-18T22:29:00.677