Sign-up

ID

VAR-202112-0249


CVE

CVE-2021-37065


TITLE

Huawei  Integer overflow vulnerability in smartphones

Trust: 0.8

sources: JVNDB: JVNDB-2021-016032

DESCRIPTION

There is a Integer Overflow or Wraparound vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Confidentiality or Availability impacted. Huawei Smartphones contain an integer overflow vulnerability.Information is obtained and service operation is interrupted (DoS) It may be in a state. Huawei HarmonyOS is an operating system of the Chinese company Huawei. Provide a microkernel-based full-scenario distributed operating system. The vulnerability stems from incorrect input validation in the kernel module of HarmonyOS

Trust: 1.71

sources: NVD: CVE-2021-37065 // JVNDB: JVNDB-2021-016032 // VULHUB: VHN-398899

AFFECTED PRODUCTS

vendor:huaweimodel:harmonyosscope:ltversion:2.0

Trust: 1.0

vendor:huaweimodel:harmonyosscope: - version: -

Trust: 0.8

vendor:huaweimodel:harmonyosscope:eqversion: -

Trust: 0.8

sources: JVNDB: JVNDB-2021-016032 // NVD: CVE-2021-37065

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2021-37065
value: CRITICAL

Trust: 1.0

NVD: CVE-2021-37065
value: CRITICAL

Trust: 0.8

CNNVD: CNNVD-202109-2037
value: CRITICAL

Trust: 0.6

VULHUB: VHN-398899
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2021-37065
severity: MEDIUM
baseScore: 6.4
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 4.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-398899
severity: MEDIUM
baseScore: 6.4
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 4.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2021-37065
baseSeverity: CRITICAL
baseScore: 9.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 5.2
version: 3.1

Trust: 1.0

NVD: CVE-2021-37065
baseSeverity: CRITICAL
baseScore: 9.1
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: VULHUB: VHN-398899 // JVNDB: JVNDB-2021-016032 // CNNVD: CNNVD-202109-2037 // NVD: CVE-2021-37065

PROBLEMTYPE DATA

problemtype:CWE-190

Trust: 1.1

problemtype:Integer overflow or wraparound (CWE-190) [NVD evaluation ]

Trust: 0.8

sources: VULHUB: VHN-398899 // JVNDB: JVNDB-2021-016032 // NVD: CVE-2021-37065

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202109-2037

TYPE

input validation error

Trust: 0.6

sources: CNNVD: CNNVD-202109-2037

PATCH

title:security-bulletins-202109-0000001196270727url:https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-0000001196270727

Trust: 0.8

title:Huawei HarmonyOS Enter the fix for the verification error vulnerabilityurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=173514

Trust: 0.6

sources: JVNDB: JVNDB-2021-016032 // CNNVD: CNNVD-202109-2037

EXTERNAL IDS

db:NVDid:CVE-2021-37065

Trust: 3.3

db:JVNDBid:JVNDB-2021-016032

Trust: 0.8

db:CNNVDid:CNNVD-202109-2037

Trust: 0.6

db:CNVDid:CNVD-2022-44616

Trust: 0.1

db:VULHUBid:VHN-398899

Trust: 0.1

sources: VULHUB: VHN-398899 // JVNDB: JVNDB-2021-016032 // CNNVD: CNNVD-202109-2037 // NVD: CVE-2021-37065

REFERENCES

url:https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-0000001196270727

Trust: 1.7

url:https://nvd.nist.gov/vuln/detail/cve-2021-37065

Trust: 1.4

url:https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202109-0000001196270727

Trust: 0.6

sources: VULHUB: VHN-398899 // JVNDB: JVNDB-2021-016032 // CNNVD: CNNVD-202109-2037 // NVD: CVE-2021-37065

SOURCES

db:VULHUBid:VHN-398899
db:JVNDBid:JVNDB-2021-016032
db:CNNVDid:CNNVD-202109-2037
db:NVDid:CVE-2021-37065

LAST UPDATE DATE

2024-08-14T13:53:44.736000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-398899date:2021-12-09T00:00:00
db:JVNDBid:JVNDB-2021-016032date:2022-12-05T07:11:00
db:CNNVDid:CNNVD-202109-2037date:2021-12-14T00:00:00
db:NVDid:CVE-2021-37065date:2021-12-09T17:39:41.403

SOURCES RELEASE DATE

db:VULHUBid:VHN-398899date:2021-12-07T00:00:00
db:JVNDBid:JVNDB-2021-016032date:2022-12-05T00:00:00
db:CNNVDid:CNNVD-202109-2037date:2021-09-05T00:00:00
db:NVDid:CVE-2021-37065date:2021-12-07T17:15:08.800