There are two denial of service vulnerabilities on some Huawei smartphones
Published Apr 27, 2020
5.3
MEDIUMCVSS 3.1
EPSS 0.32%
Description
There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device abnormal. This is 2 out of 2 vulnerabilities. Different than CVE-2020-5302. Affected products are: ALP-AL00B: earlier than 9.1.0.333(C00E333R2P1T8) ALP-L09: earlier than 9.1.0.300(C432E4R1P9T8) ALP-L29: earlier than 9.1.0.315(C636E5R1P13T8) BLA-L29C: earlier than 9.1.0.321(C636E4R1P14T8), earlier than 9.1.0.330(C432E6R1P12T8), earlier than 9.1.0.302(C635E4R1P13T8) Berkeley-AL20: earlier than 9.1.0.333(C00E333R2P1T8) Berkeley-L09: earlier than 9.1.0.350(C10E3R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8), earlier than 9.1.0.350(C636E4R1P13T8) Charlotte-L09C: earlier than 9.1.0.311(C185E4R1P11T8), earlier than 9.1.0.345(C432E8R1P11T8) Charlotte-L29C: earlier than 9.1.0.325(C185E4R1P11T8), earlier than 9.1.0.335(C636E3R1P13T8), earlier than 9.1.0.345(C432E8R1P11T8), earlier than 9.1.0.336(C605E3R1P12T8) Columbia-AL10B: earlier than 9.1.0.333(C00E333R1P1T8) Columbia-L29D: earlier than 9.1.0.350(C461E3R1P11T8), earlier than 9.1.0.350(C185E3R1P12T8), earlier than 9.1.0.350(C10E5R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8) Cornell-AL00A: earlier than 9.1.0.333(C00E333R1P1T8) Cornell-L29A: earlier than 9.1.0.328(C185E1R1P9T8), earlier than 9.1.0.328(C432E1R1P9T8), earlier than 9.1.0.330(C461E1R1P9T8), earlier than 9.1.0.328(C636E2R1P12T8) Emily-L09C: earlier than 9.1.0.336(C605E4R1P12T8), earlier than 9.1.0.311(C185E2R1P12T8), earlier than 9.1.0.345(C432E10R1P12T8) Emily-L29C: earlier than 9.1.0.311(C605E2R1P12T8), earlier than 9.1.0.311(C636E7R1P13T8), earlier than 9.1.0.311(C432E7R1P11T8) Ever-L29B: earlier than 9.1.0.311(C185E3R3P1), earlier than 9.1.0.310(C636E3R2P1), earlier than 9.1.0.310(C432E3R1P12) HUAWEI Mate 20: earlier than 9.1.0.131(C00E131R3P1) HUAWEI Mate 20 Pro: earlier than 9.1.0.310(C185E10R2P1) HUAWEI Mate 20 RS: earlier than 9.1.0.135(C786E133R3P1) HUAWEI Mate 20 X: earlier than 9.1.0.135(C00E133R2P1) HUAWEI P20: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P20 Pro: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P30: earlier than 9.1.0.193 HUAWEI P30 Pro: earlier than 9.1.0.186(C00E180R2P1) HUAWEI Y9 2019: earlier than 9.1.0.220(C605E3R1P1T8) HUAWEI nova lite 3: earlier than 9.1.0.305(C635E8R2P2) Honor 10 Lite: earlier than 9.1.0.283(C605E8R2P2) Honor 8X: earlier than 9.1.0.221(C461E2R1P1T8) Honor View 20: earlier than 9.1.0.238(C432E1R3P1) Jackman-L22: earlier than 9.1.0.247(C636E2R4P1T8) Paris-L21B: earlier than 9.1.0.331(C432E1R1P2T8) Paris-L21MEB: earlier than 9.1.0.331(C185E4R1P3T8) Paris-L29B: earlier than 9.1.0.331(C636E1R1P3T8) Sydney-AL00: earlier than 9.1.0.212(C00E62R1P7T8) Sydney-L21: earlier than 9.1.0.215(C432E1R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8) Sydney-L21BR: earlier than 9.1.0.213(C185E1R1P2T8) Sydney-L22: earlier than 9.1.0.258(C636E1R1P1T8) Sydney-L22BR: earlier than 9.1.0.258(C636E1R1P1T8) SydneyM-AL00: earlier than 9.1.0.228(C00E78R1P7T8) SydneyM-L01: earlier than 9.1.0.215(C782E2R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8), earlier than 9.1.0.270(C432E3R1P1T8) SydneyM-L03: earlier than 9.1.0.217(C605E1R1P1T8) SydneyM-L21: earlier than 9.1.0.221(C461E1R1P1T8), earlier than 9.1.0.215(C432E4R1P1T8) SydneyM-L22: earlier than 9.1.0.259(C185E1R1P2T8), earlier than 9.1.0.220(C635E1R1P2T8), earlier than 9.1.0.216(C569E1R1P1T8) SydneyM-L23: earlier than 9.1.0.226(C605E2R1P1T8) Yale-L21A: earlier than 9.1.0.154(C432E2R3P2), earlier than 9.1.0.154(C461E2R2P1), earlier than 9.1.0.154(C636E2R2P1) Honor 20: earlier than 9.1.0.152(C00E150R5P1) Honor Magic2: earlier than 10.0.0.187 Honor V20: earlier than 9.1.0.234(C00E234R4P3)
Affected products
-
Affected
- Versions earlier than 9.1.0.333(C00E333R2P1T8)
-
Affected
- Versions earlier than 9.1.0.300(C432E4R1P9T8)
-
Affected
- Versions earlier than 9.1.0.315(C636E5R1P13T8)
-
Affected
- Versions earlier than 9.1.0.302(C635E4R1P13T8)
- Versions earlier than 9.1.0.321(C636E4R1P14T8)
- Versions earlier than 9.1.0.330(C432E6R1P12T8)
-
Affected
- Versions earlier than 9.1.0.333(C00E333R2P1T8)
-
Affected
- Versions earlier than 9.1.0.350(C10E3R1P14T8)
- Versions earlier than 9.1.0.350(C636E4R1P13T8)
- Versions earlier than 9.1.0.351(C432E5R1P13T8)
-
Affected
- Versions earlier than 9.1.0.311(C185E4R1P11T8)
- Versions earlier than 9.1.0.345(C432E8R1P11T8)
-
Affected
- Versions earlier than 9.1.0.325(C185E4R1P11T8)
- Versions earlier than 9.1.0.335(C636E3R1P13T8)
- Versions earlier than 9.1.0.336(C605E3R1P12T8)
- Versions earlier than 9.1.0.345(C432E8R1P11T8)
-
Affected
- Versions earlier than 9.1.0.333(C00E333R1P1T8)
-
Affected
- Versions earlier than 9.1.0.350(C10E5R1P14T8)
- Versions earlier than 9.1.0.350(C185E3R1P12T8)
- Versions earlier than 9.1.0.350(C461E3R1P11T8)
- Versions earlier than 9.1.0.351(C432E5R1P13T8)
-
Affected
- Versions earlier than 9.1.0.333(C00E333R1P1T8)
-
Affected
- Versions earlier than 9.1.0.328(C185E1R1P9T8)
- Versions earlier than 9.1.0.328(C432E1R1P9T8)
- Versions earlier than 9.1.0.328(C636E2R1P12T8)
- Versions earlier than 9.1.0.330(C461E1R1P9T8)
-
Affected
- Versions earlier than 9.1.0.311(C185E2R1P12T8)
- Versions earlier than 9.1.0.336(C605E4R1P12T8)
- Versions earlier than 9.1.0.345(C432E10R1P12T8)
-
Affected
- Versions earlier than 9.1.0.311(C432E7R1P11T8)
- Versions earlier than 9.1.0.311(C605E2R1P12T8)
- Versions earlier than 9.1.0.311(C636E7R1P13T8)
-
Affected
- Versions earlier than 9.1.0.311(C185E3R3P1)
-
Affected
- Versions earlier than 9.1.0.131(C00E131R3P1)
-
Affected
- Versions earlier than 9.1.0.310(C185E10R2P1)
-
Affected
- Versions earlier than 9.1.0.135(C786E133R3P1)
-
Affected
- Versions earlier than 9.1.0.135(C00E133R2P1)
-
Affected
- Versions earlier than 9.1.0.333(C00E333R1P1T8)
-
Affected
- Versions earlier than 9.1.0.333(C00E333R1P1T8)
-
Affected
- Versions earlier than 9.1.0.193
-
Affected
- Versions earlier than 9.1.0.186(C00E180R2P1)
-
Affected
- Versions earlier than 9.1.0.220(C605E3R1P1T8)
-
Affected
- Versions earlier than 9.1.0.305(C635E8R2P2)
-
Affected
- Versions earlier than 9.1.0.283(C605E8R2P2)
-
Affected
- Versions earlier than 9.1.0.152(C00E150R5P1)
-
Affected
- Versions earlier than 9.1.0.221(C461E2R1P1T8)
-
Affected
- Versions earlier than 10.0.0.187
-
Affected
- Versions earlier than 9.1.0.234(C00E234R4P3)
-
Affected
- Versions earlier than 9.1.0.238(C432E1R3P1)
-
Affected
- Versions earlier than 9.1.0.247(C636E2R4P1T8)
-
Affected
- Versions earlier than 9.1.0.331(C432E1R1P2T8)
-
Affected
- Versions earlier than 9.1.0.331(C185E4R1P3T8)
-
Affected
- Versions earlier than 9.1.0.331(C636E1R1P3T8)
-
Affected
- Versions earlier than 9.1.0.212(C00E62R1P7T8)
-
Affected
- Versions earlier than 9.1.0.213(C185E1R1P1T8)
- Versions earlier than 9.1.0.215(C432E1R1P1T8)
-
Affected
- Versions earlier than 9.1.0.213(C185E1R1P2T8)
-
Affected
- Versions earlier than 9.1.0.258(C636E1R1P1T8)
-
Affected
- Versions earlier than 9.1.0.258(C636E1R1P1T8)
-
Affected
- Versions earlier than 9.1.0.228(C00E78R1P7T8)
-
Affected
- Versions earlier than 9.1.0.213(C185E1R1P1T8)
- Versions earlier than 9.1.0.215(C782E2R1P1T8)
- Versions earlier than 9.1.0.270(C432E3R1P1T8)
-
Affected
- Versions earlier than 9.1.0.217(C605E1R1P1T8)
-
Affected
- Versions earlier than 9.1.0.215(C432E4R1P1T8)
- Versions earlier than 9.1.0.221(C461E1R1P1T8)
-
Affected
- Versions earlier than 9.1.0.216(C569E1R1P1T8)
- Versions earlier than 9.1.0.220(C635E1R1P2T8)
- Versions earlier than 9.1.0.259(C185E1R1P2T8)
-
Affected
- Versions earlier than 9.1.0.226(C605E2R1P1T8)
-
Affected
- Versions earlier than 9.1.0.154(C432E2R3P2)
- Versions earlier than 9.1.0.154(C461E2R2P1)
- Versions earlier than 9.1.0.154(C636E2R2P1)
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| Huawei | Alp-Al00b | unknown | Affected
|
| Huawei | ALP-L09 | unknown | Affected
|
| Huawei | ALP-L29 | unknown | Affected
|
| Huawei | Bla-L29c | unknown | Affected
|
| Huawei | Berkeley-AL20 | unknown | Affected
|
| Huawei | Berkeley-L09 | unknown | Affected
|
| Huawei | Charlotte-L09C | unknown | Affected
|
| Huawei | Charlotte-L29C | unknown | Affected
|
| Huawei | Columbia-AL10B | unknown | Affected
|
| Huawei | Columbia-L29D | unknown | Affected
|
| Huawei | Cornell-AL00A | unknown | Affected
|
| Huawei | Cornell-L29A | unknown | Affected
|
| Huawei | Emily-L09C | unknown | Affected
|
| Huawei | Emily-L29C | unknown | Affected
|
| Huawei | Ever-L29B | unknown | Affected
|
| Huawei | HUAWEI Mate 20 | unknown | Affected
|
| Huawei | HUAWEI Mate 20 Pro | unknown | Affected
|
| Huawei | HUAWEI Mate 20 RS | unknown | Affected
|
| Huawei | HUAWEI Mate 20 X | unknown | Affected
|
| Huawei | Huawei P20 | unknown | Affected
|
| Huawei | HUAWEI P20 Pro | unknown | Affected
|
| Huawei | Huawei P30 | unknown | Affected
|
| Huawei | HUAWEI P30 Pro | unknown | Affected
|
| Huawei | Huawei Y9 2019 | unknown | Affected
|
| Huawei | HUAWEI nova lite 3 | unknown | Affected
|
| Huawei | Honor 10 Lite | unknown | Affected
|
| Huawei | Honor 20 | unknown | Affected
|
| Huawei | Honor 8X | unknown | Affected
|
| Huawei | Honor Magic2 | unknown | Affected
|
| Huawei | Honor V20 | unknown | Affected
|
| Huawei | Honor View 20 | unknown | Affected
|
| Huawei | Jackman-L22 | unknown | Affected
|
| Huawei | Paris-L21B | unknown | Affected
|
| Huawei | Paris-L21MEB | unknown | Affected
|
| Huawei | Paris-L29B | unknown | Affected
|
| Huawei | Sydney-AL00 | unknown | Affected
|
| Huawei | Sydney-L21 | unknown | Affected
|
| Huawei | Sydney-L21BR | unknown | Affected
|
| Huawei | Sydney-L22 | unknown | Affected
|
| Huawei | Sydney-L22BR | unknown | Affected
|
| Huawei | SydneyM-AL00 | unknown | Affected
|
| Huawei | SydneyM-L01 | unknown | Affected
|
| Huawei | SydneyM-L03 | unknown | Affected
|
| Huawei | SydneyM-L21 | unknown | Affected
|
| Huawei | SydneyM-L22 | unknown | Affected
|
| Huawei | SydneyM-L23 | unknown | Affected
|
| Huawei | Yale-L21A | unknown | Affected
|
Configuration 1
- < 9.1.0.333\(c00e333r2p1t8\)
Configuration 2
- < 9.1.0.300\(c432e4r1p9t8\)
Configuration 3
- < 9.1.0.315\(c636e5r1p13t8\)
Configuration 4
- < 9.1.0.321\(c636e4r1p14t8\)
Configuration 5
- < 9.1.0.330\(c432e6r1p12t8\)
Configuration 6
- < 9.1.0.302\(c635e4r1p13t8\)
Configuration 7
- < 9.1.0.333\(c00e333r2p1t8\)
Running on/with
- n/a
Configuration 8
- < 9.1.0.350\(c10e3r1p14t8\)
Running on/with
- n/a
Configuration 9
- < 9.1.0.351\(c432e5r1p13t8\)
Running on/with
- n/a
Configuration 10
- < 9.1.0.350\(c636e4r1p13t8\)
Running on/with
- n/a
Configuration 11
- < 9.1.0.311\(c185e4r1p11t8\)
Running on/with
- n/a
Configuration 12
- < 9.1.0.345\(c432e8r1p11t8\)
Running on/with
- n/a
Configuration 13
- < 9.1.0.325\(c185e4r1p11t8\)
Running on/with
- n/a
Configuration 14
- < 9.1.0.335\(c636e3r1p13t8\)
Running on/with
- n/a
Configuration 15
- < 9.1.0.345\(c432e8r1p11t8\)
Running on/with
- n/a
Configuration 16
- < 9.1.0.336\(c605e3r1p12t8\)
Running on/with
- n/a
Configuration 17
- < 9.1.0.333\(c00e333r1p1t8\)
Running on/with
- n/a
Configuration 18
- < 9.1.0.350\(c461e3r1p11t8\)
Running on/with
- n/a
Configuration 19
- < 9.1.0.350\(c185e3r1p12t8\)
Running on/with
- n/a
Configuration 20
- < 9.1.0.350\(c10e5r1p14t8\)
Running on/with
- n/a
Configuration 21
- < 9.1.0.351\(c432e5r1p13t8\)
Running on/with
- n/a
Configuration 22
- < 9.1.0.333\(c00e333r1p1t8\)
Running on/with
- n/a
Configuration 23
- < 9.1.0.328\(c185e1r1p9t8\)
Running on/with
- n/a
Configuration 24
- < 9.1.0.328\(c432e1r1p9t8\)
Running on/with
- n/a
Configuration 25
- < 9.1.0.330\(c461e1r1p9t8\)
Running on/with
- n/a
Configuration 26
- < 9.1.0.328\(c636e2r1p12t8\)
Running on/with
- n/a
Configuration 27
- < 9.1.0.336\(c605e4r1p12t8\)
Running on/with
- n/a
Configuration 28
- < 9.1.0.311\(c185e2r1p12t8\)
Running on/with
- n/a
Configuration 29
- < 9.1.0.345\(c432e10r1p12t8\)
Running on/with
- n/a
Configuration 30
- < 9.1.0.311\(c605e2r1p12t8\)
Running on/with
- n/a
Configuration 31
- < 9.1.0.311\(c636e7r1p13t8\)
Running on/with
- n/a
Configuration 32
- < 9.1.0.311\(c432e7r1p11t8\)
Running on/with
- n/a
Configuration 33
- < 9.1.0.311\(c185e3r3p1\)
Configuration 34
- < 9.1.0.310\(c636e3r2p1\)
Configuration 35
- < 9.1.0.310\(c432e3r1p12\)
Configuration 36
- < 9.1.0.131\(c00e131r3p1\)
Configuration 37
- < 9.1.0.310\(c185e10r2p1\)
Running on/with
- n/a
Configuration 38
- < 9.1.0.135\(c786e133r3p1\)
Running on/with
- n/a
Configuration 39
- < 9.1.0.135\(c00e133r2p1\)
Configuration 40
- < 9.1.0.333\(c00e333r1p1t8\)
Configuration 41
- < 9.1.0.333\(c00e333r1p1t8\)
Configuration 42
- < 9.1.0.193
Configuration 43
- < 9.1.0.186\(c00e180r2p1\)
Configuration 44
- < 9.1.0.220\(c605e3r1p1t8\)
Configuration 45
- < 9.1.0.305\(c635e8r2p2\)
Running on/with
- n/a
Configuration 46
- < 9.1.0.283\(c605e8r2p2\)
Running on/with
- n/a
Configuration 47
- < 9.1.0.221\(c461e2r1p1t8\)
Configuration 48
- < 9.1.0.238\(c432e1r3p1\)
Running on/with
- n/a
Configuration 49
- < 9.1.0.247\(c636e2r4p1t8\)
Running on/with
- n/a
Configuration 50
- < 9.1.0.331\(c432e1r1p2t8\)
Running on/with
- n/a
Configuration 51
- < 9.1.0.331\(c185e4r1p3t8\)
Running on/with
- n/a
Configuration 52
- < 9.1.0.331\(c636e1r1p3t8\)
Running on/with
- n/a
Configuration 53
- < 9.1.0.212\(c00e62r1p7t8\)
Running on/with
- n/a
Configuration 54
- < 9.1.0.215\(c432e1r1p1t8\)
Running on/with
- n/a
Configuration 55
- < 9.1.0.213\(c185e1r1p1t8\)
Running on/with
- n/a
Configuration 56
- < 9.1.0.213\(c185e1r1p2t8\)
Running on/with
- n/a
Configuration 57
- < 9.1.0.258\(c636e1r1p1t8\)
Running on/with
- n/a
Configuration 58
- < 9.1.0.258\(c636e1r1p1t8\)
Running on/with
- n/a
Configuration 59
- < 9.1.0.228\(c00e78r1p7t8\)
Running on/with
- n/a
Configuration 60
- < 9.1.0.215\(c782e2r1p1t8\)
Running on/with
- n/a
Configuration 61
- < 9.1.0.213\(c185e1r1p1t8\)
Running on/with
- n/a
Configuration 62
- < 9.1.0.270\(c432e3r1p1t8\)
Running on/with
- n/a
Configuration 63
- < 9.1.0.217\(c605e1r1p1t8\)
Running on/with
- n/a
Configuration 64
- < 9.1.0.221\(c461e1r1p1t8\)
Running on/with
- n/a
Configuration 65
- < 9.1.0.215\(c432e4r1p1t8\)
Running on/with
- n/a
Configuration 66
- < 9.1.0.259\(c185e1r1p2t8\)
Running on/with
- n/a
Configuration 67
- < 9.1.0.220\(c635e1r1p2t8\)
Running on/with
- n/a
Configuration 68
- < 9.1.0.216\(c569e1r1p1t8\)
Running on/with
- n/a
Configuration 69
- < 9.1.0.226\(c605e2r1p1t8\)
Running on/with
- n/a
Configuration 70
- < 9.1.0.154\(c432e2r3p2\)
Configuration 71
- < 9.1.0.154\(c461e2r2p1\)
Configuration 72
- < 9.1.0.154\(c636e2r2p1\)
Configuration 73
- < 9.1.0.152\(c00e150r5p1\)
Configuration 74
- < 10.0.0.187
Running on/with
- n/a
Configuration 75
- < 9.1.0.234\(c00e234r4p3\)
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (2)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-14908 Advisory
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190814-01-mobile-en x_refsource_CONFIRMVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-14908 | Advisory | |
| https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190814-01-mobile-en | x_refsource_CONFIRMVendor Advisory |
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
No data
Red Hat
No data
GitHub
No data