PT-2023-20378 · Unknown · Openharmony
CVE-2023-25947
·
Publicado
2023-03-10
·
Atualizado
2024-09-09
CVSS v3.1
6.2
Média
| Vetor | AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
OpenHarmony versions prior to 3.1.4
Description
The issue is related to a null pointer reference vulnerability in the bundle management subsystem. This can be exploited by local attackers to cause a denial-of-service (DoS) attack on the system when a malicious HAP package is installed.
Recommendations
For OpenHarmony versions prior to 3.1.4, update to a version that includes a fix for this issue to prevent exploitation.
Correção
RCE
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Openharmony