PT-2016-3946 · Huawei · S5300Li+11

Published 2016-01-13 · Updated 2019-06-20 · CVE-2015-8676

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Huawei S5300EI, S5300SI, S5310HI, S6300EI/ S2350EI, and S5300LI Campus series switches versions V200R001C00 through V200R001SPH017 Huawei S5300EI, S5300SI, S5310HI, S6300EI/ S2350EI, and S5300LI Campus series switches versions V200R002C00 through V200R002SPH010 Huawei S5300EI, S5300SI, S5310HI, S6300EI/ S2350EI, and S5300LI Campus series switches versions V200R003C00 through V200R003SPH010 Huawei S9300, S7700, and S9700 Campus series switches versions V200R001C00 through V200R001SPH022 Huawei S9300, S7700, and S9700 Campus series switches versions V200R002C00 through V200R002SPH010 Huawei S9300, S7700, and S9700 Campus series switches versions V200R003C00 through V200R003SPH010 Huawei S2300 and S3300 Campus series switches versions V100R006C05 through V100R006SPH021

Description The issue allows remote attackers to cause a denial of service (memory consumption and reboot) via a large number of ICMPv6 packets. This occurs because multiple Huawei switches improperly release memory for ICMPv6 packets of a specific type, leading to a memory leak after the switch receives a specially crafted ICMPv6 packet.

Recommendations For Huawei S5300EI, S5300SI, S5310HI, S6300EI/ S2350EI, and S5300LI Campus series switches versions V200R001C00 through V200R001SPH017, update to V200R001SPH018 or later. For Huawei S5300EI, S5300SI, S5310HI, S6300EI/ S2350EI, and S5300LI Campus series switches versions V200R002C00 through V200R002SPH010, update to V200R003SPH011 or later. For Huawei S5300EI, S5300SI, S5310HI, S6300EI/ S2350EI, and S5300LI Campus series switches versions V200R003C00 through V200R003SPH010, update to a version later than V200R003SPH011. For Huawei S9300, S7700, and S9700 Campus series switches versions V200R001C00 through V200R001SPH022, update to V200R001SPH023 or later. For Huawei S9300, S7700, and S9700 Campus series switches versions V200R002C00 through V200R002SPH010, update to V200R003SPH011 or later. For Huawei S9300, S7700, and S9700 Campus series switches versions V200R003C00 through V200R003SPH010, update to a version later than V200R003SPH011. For Huawei S2300 and S3300 Campus series switches versions V100R006C05 through V100R006SPH021, update to V100R006SPH022 or later.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-399

CWE-119

Related Identifiers

CVE-2015-8676

Affected Products

Huawei Vrp

S2300

S2350Ei

S3300

S5300Ei

S5300Li

S5300Si

S5310Hi

S6300Ei

S7700

S9300

S9700

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2015-8676 · Security Note
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20160113-02-switch-en · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8676 · Security Note
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20160113-02-switch-en · Note