Home

CVE-2017-8172

Description

Isub service in P10 Plus and P10 smart phones with earlier than VKY-AL00C00B157 versions and earlier than VTR-AL00C00B157 versions has a denial of service (DoS) vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and the application can send given parameter to specific interface, which make a out-of-bounds array access that results in smart phone restart.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.061

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2017-8141 ,CVE-2017-8172 are affected in p10_plus_firmware vky-al00c00b123NCM
Vulnerabilities CVE-2017-8141 ,CVE-2017-8172 are affected in p10_plus_firmware vicky-l29ac605b162NCM
Vulnerabilities CVE-2017-8141 ,CVE-2017-8172 are affected in p10_plus_firmware vicky-al00ac00b172dNCM
Vulnerabilities CVE-2017-8141 ,CVE-2017-8171 ,CVE-2017-8172 are affected in p10_plus_firmware vicky-al00ac00b172NCM
Vulnerabilities CVE-2017-8141 ,CVE-2017-8171 ,CVE-2017-8172 are affected in p10_plus_firmware 9.1.0.255(c576e6r1p8t8)NCM
Vulnerabilities CVE-2017-8141 ,CVE-2017-8171 ,CVE-2017-8172 are affected in p10_plus_firmware 9.1.0.252(c432e4r1p9t8)NCM
Vulnerabilities CVE-2017-8141 ,CVE-2017-8171 ,CVE-2017-8172 are affected in p10_plus_firmware 9.1.0.252(c185e2r1p9t8)NCM
Vulnerabilities CVE-2017-8141 ,CVE-2017-8171 ,CVE-2017-8172 are affected in p10_plus_firmware 9.1.0.201(c01e75r1p12t8)NCM
Vulnerabilities CVE-2017-8141 ,CVE-2017-8171 ,CVE-2017-8172 are affected in p10_plus_firmware 8.0.0.357(c00)NCM
Vulnerabilities CVE-2017-8172 are affected in p10_plus_firmware vky-al00c00b153NCM
Improper Validation of Array Index Vulnerability (CVE-2017-8172)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234