PT-2017-8925 · Huawei · Huawei Oceanstor 5800

Published 2017-04-02 · Updated 2017-04-06 · CVE-2016-6177

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Huawei OceanStor 5800 version V300R003C00

Description The issue is related to an integer overflow. An authenticated attacker can send large abnormal Network File System (NFS) packets, which may cause an anomaly in specific disk arrays.

Recommendations For version V300R003C00, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2016-6177

Affected Products

Huawei Oceanstor 5800

References · 3

• https://osv.dev/vulnerability/CVE-2016-6177 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-6177 · Security Note
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20160629-02-oceanstor-en · Note