PT-2016-7564 · Huawei · Huawei Cloudengine 12800+1

Publicado 2016-12-14 · Atualizado 2018-03-26 · CVE-2016-8782

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Huawei CloudEngine 12800 versions V100R003C00 through V100R006C00

Description The issue is related to a memory leak. An unauthenticated attacker may send specific Label Distribution Protocol (LDP) packets to the devices repeatedly. Due to improper validation of some specific fields of the packet, the LDP processing module does not release the memory, resulting in memory leak.

Recommendations For Huawei CloudEngine 12800 versions V100R003C00 through V100R006C00, as a temporary workaround, consider restricting access to the LDP processing module until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2016-8782

Produtos afetados

Huawei Cloudengine 12800

Huawei Vrp

Referências · 4

• http://securityfocus.com/bid/94941 · Nota
• https://osv.dev/vulnerability/CVE-2016-8782 · Aviso do Fabricante
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20161214-01-ldp-en · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-8782 · Nota de Segurança