4.3

CVE-2017-17141

Huawei S12700 V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R007C20; V200R008C00; V200R009C00;S1700 V200R006C10; V200R009C00;S2700 V100R006C03; V200R003C00; V200R005C00; V200R006C00; V200R006C10; V200R007C00; V200R007C00B050; V200R007C00SPC009T; V200R007C00SPC019T; V200R008C00; V200R009C00;S3700 V100R006C03;S5700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R003C02; V200R005C00; V200R005C01; V200R005C02; V200R005C03; V200R006C00; V200R007C00; V200R008C00; V200R009C00;S6700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R005C01; V200R005C02; V200R008C00; V200R009C00;S7700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R006C00; V200R006C01; V200R007C00; V200R007C01; V200R008C00; V200R008C06; V200R009C00;S9700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R008C00; V200R009C00 have a memory leak vulnerability. In some specific conditions, if attackers send specific malformed MPLS Service PING messages to the affected products, products do not release the memory when handling the packets. So successful exploit will result in memory leak of the affected products.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ S12700 Firmware Version v200r005c00
   Huawei ≫ S12700 Version -
Huawei ≫ S12700 Firmware Version v200r006c00
   Huawei ≫ S12700 Version -
Huawei ≫ S12700 Firmware Version v200r007c00
   Huawei ≫ S12700 Version -
Huawei ≫ S12700 Firmware Version v200r007c01
   Huawei ≫ S12700 Version -
Huawei ≫ S12700 Firmware Version v200r007c20
   Huawei ≫ S12700 Version -
Huawei ≫ S12700 Firmware Version v200r008c00
   Huawei ≫ S12700 Version -
Huawei ≫ S12700 Firmware Version v200r009c00
   Huawei ≫ S12700 Version -
Huawei ≫ S1700 Firmware Version v200r006c10
   Huawei ≫ S1700 Version -
Huawei ≫ S1700 Firmware Version v200r009c00
   Huawei ≫ S1700 Version -
Huawei ≫ S2700 Firmware Version v100r006c03
   Huawei ≫ S2700 Version -
Huawei ≫ S2700 Firmware Version v200r003c00
   Huawei ≫ S2700 Version -
Huawei ≫ S2700 Firmware Version v200r005c00
   Huawei ≫ S2700 Version -
Huawei ≫ S2700 Firmware Version v200r006c00
   Huawei ≫ S2700 Version -
Huawei ≫ S2700 Firmware Version v200r006c10
   Huawei ≫ S2700 Version -
Huawei ≫ S2700 Firmware Version v200r007c00
   Huawei ≫ S2700 Version -
Huawei ≫ S2700 Firmware Version v200r007c00b050
   Huawei ≫ S2700 Version -
Huawei ≫ S2700 Firmware Version v200r007c00spc009t
   Huawei ≫ S2700 Version -
Huawei ≫ S2700 Firmware Version v200r007c00spc019t
   Huawei ≫ S2700 Version -
Huawei ≫ S2700 Firmware Version v200r008c00
   Huawei ≫ S2700 Version -
Huawei ≫ S2700 Firmware Version v200r009c00
   Huawei ≫ S2700 Version -
Huawei ≫ S3700 Firmware Version v100r006c03
   Huawei ≫ S3700 Version -
Huawei ≫ S5700 Firmware Version v200r001c00
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r001c01
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r002c00
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r003c00
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r003c02
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r005c00
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r005c01
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r005c02
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r005c03
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r006c00
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r007c00
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r008c00
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r009c00
   Huawei ≫ S5700 Version -
Huawei ≫ S6700 Firmware Version v200r001c00
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r001c01
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r002c00
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r003c00
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r005c00
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r005c01
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r005c02
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r008c00
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r009c00
   Huawei ≫ S6700 Version -
Huawei ≫ S7700 Firmware Version v200r001c00
   Huawei ≫ S7700 Version -
Huawei ≫ S7700 Firmware Version v200r001c01
   Huawei ≫ S7700 Version -
Huawei ≫ S7700 Firmware Version v200r002c00
   Huawei ≫ S7700 Version -
Huawei ≫ S7700 Firmware Version v200r003c00
   Huawei ≫ S7700 Version -
Huawei ≫ S7700 Firmware Version v200r005c00
   Huawei ≫ S7700 Version -
Huawei ≫ S7700 Firmware Version v200r006c00
   Huawei ≫ S7700 Version -
Huawei ≫ S7700 Firmware Version v200r006c01
   Huawei ≫ S7700 Version -
Huawei ≫ S7700 Firmware Version v200r007c00
   Huawei ≫ S7700 Version -
Huawei ≫ S7700 Firmware Version v200r007c01
   Huawei ≫ S7700 Version -
Huawei ≫ S7700 Firmware Version v200r008c00
   Huawei ≫ S7700 Version -
Huawei ≫ S7700 Firmware Version v200r008c06
   Huawei ≫ S7700 Version -
Huawei ≫ S7700 Firmware Version v200r009c00
   Huawei ≫ S7700 Version -
Huawei ≫ S9700 Firmware Version v200r001c00
   Huawei ≫ S9700 Version -
Huawei ≫ S9700 Firmware Version v200r001c01
   Huawei ≫ S9700 Version -
Huawei ≫ S9700 Firmware Version v200r002c00
   Huawei ≫ S9700 Version -
Huawei ≫ S9700 Firmware Version v200r003c00
   Huawei ≫ S9700 Version -
Huawei ≫ S9700 Firmware Version v200r005c00
   Huawei ≫ S9700 Version -
Huawei ≫ S9700 Firmware Version v200r006c00
   Huawei ≫ S9700 Version -
Huawei ≫ S9700 Firmware Version v200r007c00
   Huawei ≫ S9700 Version -
Huawei ≫ S9700 Firmware Version v200r007c01
   Huawei ≫ S9700 Version -
Huawei ≫ S9700 Firmware Version v200r008c00
   Huawei ≫ S9700 Version -
Huawei ≫ S9700 Firmware Version v200r009c00
   Huawei ≫ S9700 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.71% 0.502
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 3.7 2.2 1.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-772 Missing Release of Resource after Effective Lifetime

The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-mpls-en
Vendor Advisory