Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-15349

Huawei CloudEngine 12800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 5800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 6800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 7800 V100R003C00, V100R005C00, V100R005C10, V100R006C00 have a memory leak vulnerability. An unauthenticated attacker may send specific Resource ReServation Protocol (RSVP) packets to the affected products. Due to not release the memory to handle the packets, successful exploit will result in memory leak of the affected products and lead to a DoS condition.

Published

2018-02-15T16:29:01.203

Last Modified

2024-11-21T03:14:31.227

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-772
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System huawei cloudengine_12800_firmware v100r003c00 Yes
Operating System huawei cloudengine_12800_firmware v100r005c00 Yes
Operating System huawei cloudengine_12800_firmware v100r005c10 Yes
Operating System huawei cloudengine_12800_firmware v100r006c00 Yes
Hardware huawei cloudengine_12800 - No
Operating System huawei cloudengine_5800_firmware v100r003c00 Yes
Operating System huawei cloudengine_5800_firmware v100r005c00 Yes
Operating System huawei cloudengine_5800_firmware v100r005c10 Yes
Operating System huawei cloudengine_5800_firmware v100r006c00 Yes
Hardware huawei cloudengine_5800 - No
Operating System huawei cloudengine_6800_firmware v100r003c00 Yes
Operating System huawei cloudengine_6800_firmware v100r005c00 Yes
Operating System huawei cloudengine_6800_firmware v100r005c10 Yes
Operating System huawei cloudengine_6800_firmware v100r006c00 Yes
Hardware huawei cloudengine_6800 - No
Operating System huawei cloudengine_7800_firmware v100r003c00 Yes
Operating System huawei cloudengine_7800_firmware v100r005c00 Yes
Operating System huawei cloudengine_7800_firmware v100r005c10 Yes
Operating System huawei cloudengine_7800_firmware v100r006c00 Yes
Hardware huawei cloudengine_7800 - No
References