PT-2016-7571 · Huawei · S5300+9

Publicado 2016-06-08 · Atualizado 2017-04-11 · CVE-2016-8797

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Huawei AR3200 versions V200R007C00, V200R005C32, V200R005C20 Huawei S12700 versions V200R008C00, V200R007C00 Huawei S5300 versions V200R008C00, V200R007C00, V200R006C00 Huawei S5700 versions V200R008C00, V200R007C00, V200R006C00 Huawei S6300 versions V200R008C00, V200R007C00 Huawei S6700 versions V200R008C00, V200R007C00 Huawei S7700 versions V200R008C00, V200R007C00, V200R006C00 Huawei S9300 versions V200R008C00, V200R007C00, V200R006C00 Huawei S9700 versions V200R008C00, V200R007C00, V200R006C00

Description The issue allows remote attackers to send abnormal Multiprotocol Label Switching (MPLS) packets to cause memory exhaustion. This occurs because the packet processing module of the device repeatedly applies for memory when processing these abnormal packets, resulting in memory exhaustion during persistent attacks.

Recommendations For Huawei AR3200 version V200R007C00, update to a version that fixes the memory leak issue. For Huawei AR3200 version V200R005C32, update to a version that fixes the memory leak issue. For Huawei AR3200 version V200R005C20, update to a version that fixes the memory leak issue. For Huawei S12700 version V200R008C00, update to a version that fixes the memory leak issue. For Huawei S12700 version V200R007C00, update to a version that fixes the memory leak issue. For Huawei S5300 version V200R008C00, update to a version that fixes the memory leak issue. For Huawei S5300 version V200R007C00, update to a version that fixes the memory leak issue. For Huawei S5300 version V200R006C00, update to a version that fixes the memory leak issue. For Huawei S5700 version V200R008C00, update to a version that fixes the memory leak issue. For Huawei S5700 version V200R007C00, update to a version that fixes the memory leak issue. For Huawei S5700 version V200R006C00, update to a version that fixes the memory leak issue. For Huawei S6300 version V200R008C00, update to a version that fixes the memory leak issue. For Huawei S6300 version V200R007C00, update to a version that fixes the memory leak issue. For Huawei S6700 version V200R008C00, update to a version that fixes the memory leak issue. For Huawei S6700 version V200R007C00, update to a version that fixes the memory leak issue. For Huawei S7700 version V200R008C00, update to a version that fixes the memory leak issue. For Huawei S7700 version V200R007C00, update to a version that fixes the memory leak issue. For Huawei S7700 version V200R006C00, update to a version that fixes the memory leak issue. For Huawei S9300 version V200R008C00, update to a version that fixes the memory leak issue. For Huawei S9300 version V200R007C00, update to a version that fixes the memory leak issue. For Huawei S9300 version V200R006C00, update to a version that fixes the memory leak issue. For Huawei S9700 version V200R008C00, update to a version that fixes the memory leak issue. For Huawei S9700 version V200R007C00, update to a version that fixes the memory leak issue. For Huawei S9700 version V200R006C00, update to a version that fixes the memory leak issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2016-8797

Produtos afetados

Ar3200

Huawei Vrp

S12700

S5300

S5700

S6300

S6700

S7700

S9300

S9700

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-8797 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-8797 · Aviso do Fabricante
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20160608-01-mpls-en · Aviso do Fabricante