cnvd-2018-07349
Vulnerability from cnvd

Title: 多款Huawei产品内存泄露漏洞(CNVD-2018-07349)

Description:

Huawei S12700等都是中国华为(Huawei)公司的智能路由交换机。

多款Huawei产品中存在内存泄露漏洞,该漏洞源于程序在处理数据包时未能释放内存。攻击者可通过向受影响的设备发送畸形的MPLS Service PING报文利用该漏洞造成内存泄露。

Severity:

Patch Name: 多款Huawei产品内存泄露漏洞(CNVD-2018-07349)的补丁

Patch Description:

Huawei S12700等都是中国华为(Huawei)公司的智能路由交换机。

多款Huawei产品中存在内存泄露漏洞,该漏洞源于程序在处理数据包时未能释放内存。攻击者可通过向受影响的设备发送畸形的MPLS Service PING报文利用该漏洞造成内存泄露。目前,供应商发布了安全公告及相关补丁信息,修复了此漏洞。

Formal description:

目前厂商已发布升级补丁以修复漏洞,补丁获取链接: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-mpls-en

Reference: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-mpls-en

Impacted products
Name
['Huawei S5700 V200R001C00', 'Huawei S7700 V200R003C00', 'Huawei S7700 V200R005C00', 'Huawei S9700 V200R003C00', 'Huawei S9700 V200R005C00', 'Huawei S7700 V200R001C00', 'Huawei S9700 V200R001C00', 'Huawei S12700 V200R006C00', 'Huawei S6700 V200R001C00', 'Huawei S12700 V200R007C00', 'Huawei S5700 V200R007C00', 'Huawei S7700 V200R007C00', 'Huawei S9700 V200R007C00', 'Huawei S5700 V200R005C03', 'Huawei S5700 V200R009C00', 'Huawei S6700 V200R005C00', 'Huawei S6700 V200R009C00', 'Huawei S7700 V200R009C00', 'Huawei S9700 V200R008C00', 'Huawei S12700 V200R009C00', 'Huawei S12700 V200R007C01', 'Huawei S2700 V100R006C03', 'Huawei S2700 V200R003C00', 'Huawei S2700 V200R005C00', 'Huawei S2700 V200R006C00', 'Huawei S2700 V200R007C00', 'Huawei S2700 V200R008C00', 'Huawei S5700 V200R001C01', 'Huawei S5700 V200R002C00', 'Huawei S5700 V200R003C00', 'Huawei S5700 V200R003C02', 'Huawei S5700 V200R005C00', 'Huawei S5700 V200R006C00', 'Huawei S5700 V200R008C00', 'Huawei S6700 V200R001C01', 'Huawei S6700 V200R002C00', 'Huawei S6700 V200R003C00', 'Huawei S6700 V200R008C00', 'Huawei S7700 V200R001C01', 'Huawei S7700 V200R002C00', 'Huawei S7700 V200R006C00', 'Huawei S7700 V200R008C00', 'Huawei S9700 V200R002C00', 'Huawei S9700 V200R006C00', 'Huawei S12700 V200R007C20', 'Huawei S1700 V200R006C10', 'Huawei S1700 V200R009C00', 'Huawei S2700 V200R006C10', 'Huawei S2700 V200R009C00', 'Huawei S9700 V200R007C01', 'Huawei S9700 V200R009C00', 'Huawei S5700 V200R005C01', 'Huawei S5700 V200R005C02', 'Huawei S6700 V200R005C01', 'Huawei S6700 V200R005C02', 'Huawei Huawei S12700 V200R005C00', 'Huawei S12700 V200R008C00', 'Huawei S7700 V200R006C01', 'Huawei S7700 V200R007C01', 'Huawei S7700 V200R008C06', 'Huawei S9700 V200R001C01', 'Huawei S2700 V200R007C00B050', 'Huawei S2700 V200R007C00SPC009T', 'Huawei S2700 V200R007C00SPC019T', 'Huawei S3700 V100R006C03']
Show details on source website


{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-17141",
      "cveUrl": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17141"
    }
  },
  "description": "Huawei S12700\u7b49\u90fd\u662f\u4e2d\u56fd\u534e\u4e3a\uff08Huawei\uff09\u516c\u53f8\u7684\u667a\u80fd\u8def\u7531\u4ea4\u6362\u673a\u3002\r\n\r\n\u591a\u6b3eHuawei\u4ea7\u54c1\u4e2d\u5b58\u5728\u5185\u5b58\u6cc4\u9732\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u5728\u5904\u7406\u6570\u636e\u5305\u65f6\u672a\u80fd\u91ca\u653e\u5185\u5b58\u3002\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u5411\u53d7\u5f71\u54cd\u7684\u8bbe\u5907\u53d1\u9001\u7578\u5f62\u7684MPLS Service PING\u62a5\u6587\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u5185\u5b58\u6cc4\u9732\u3002",
  "discovererName": "Huawei",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttp://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-mpls-en",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-07349",
  "openTime": "2018-04-10",
  "patchDescription": "Huawei S12700\u7b49\u90fd\u662f\u4e2d\u56fd\u534e\u4e3a\uff08Huawei\uff09\u516c\u53f8\u7684\u667a\u80fd\u8def\u7531\u4ea4\u6362\u673a\u3002\r\n\r\n\u591a\u6b3eHuawei\u4ea7\u54c1\u4e2d\u5b58\u5728\u5185\u5b58\u6cc4\u9732\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u5728\u5904\u7406\u6570\u636e\u5305\u65f6\u672a\u80fd\u91ca\u653e\u5185\u5b58\u3002\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u5411\u53d7\u5f71\u54cd\u7684\u8bbe\u5907\u53d1\u9001\u7578\u5f62\u7684MPLS Service PING\u62a5\u6587\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u5185\u5b58\u6cc4\u9732\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "\u591a\u6b3eHuawei\u4ea7\u54c1\u5185\u5b58\u6cc4\u9732\u6f0f\u6d1e\uff08CNVD-2018-07349\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Huawei S5700 V200R001C00",
      "Huawei S7700 V200R003C00",
      "Huawei S7700 V200R005C00",
      "Huawei S9700 V200R003C00",
      "Huawei S9700 V200R005C00",
      "Huawei S7700 V200R001C00",
      "Huawei S9700 V200R001C00",
      "Huawei S12700 V200R006C00",
      "Huawei S6700 V200R001C00",
      "Huawei S12700 V200R007C00",
      "Huawei S5700 V200R007C00",
      "Huawei S7700 V200R007C00",
      "Huawei S9700 V200R007C00",
      "Huawei S5700 V200R005C03",
      "Huawei S5700 V200R009C00",
      "Huawei S6700 V200R005C00",
      "Huawei S6700 V200R009C00",
      "Huawei S7700 V200R009C00",
      "Huawei S9700 V200R008C00",
      "Huawei S12700 V200R009C00",
      "Huawei S12700 V200R007C01",
      "Huawei S2700 V100R006C03",
      "Huawei S2700 V200R003C00",
      "Huawei S2700 V200R005C00",
      "Huawei S2700 V200R006C00",
      "Huawei S2700 V200R007C00",
      "Huawei S2700 V200R008C00",
      "Huawei S5700 V200R001C01",
      "Huawei S5700 V200R002C00",
      "Huawei S5700 V200R003C00",
      "Huawei S5700 V200R003C02",
      "Huawei S5700 V200R005C00",
      "Huawei S5700 V200R006C00",
      "Huawei S5700 V200R008C00",
      "Huawei S6700 V200R001C01",
      "Huawei S6700 V200R002C00",
      "Huawei S6700 V200R003C00",
      "Huawei S6700 V200R008C00",
      "Huawei S7700 V200R001C01",
      "Huawei S7700 V200R002C00",
      "Huawei S7700 V200R006C00",
      "Huawei S7700 V200R008C00",
      "Huawei S9700 V200R002C00",
      "Huawei S9700 V200R006C00",
      "Huawei S12700 V200R007C20",
      "Huawei S1700 V200R006C10",
      "Huawei S1700 V200R009C00",
      "Huawei S2700 V200R006C10",
      "Huawei S2700 V200R009C00",
      "Huawei S9700 V200R007C01",
      "Huawei S9700 V200R009C00",
      "Huawei S5700 V200R005C01",
      "Huawei S5700 V200R005C02",
      "Huawei S6700 V200R005C01",
      "Huawei S6700 V200R005C02",
      "Huawei Huawei S12700 V200R005C00",
      "Huawei S12700 V200R008C00",
      "Huawei S7700 V200R006C01",
      "Huawei S7700 V200R007C01",
      "Huawei S7700 V200R008C06",
      "Huawei S9700 V200R001C01",
      "Huawei S2700 V200R007C00B050",
      "Huawei S2700 V200R007C00SPC009T",
      "Huawei S2700 V200R007C00SPC019T",
      "Huawei S3700 V100R006C03"
    ]
  },
  "referenceLink": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-mpls-en",
  "serverity": "\u4e2d",
  "submitTime": "2018-03-19",
  "title": "\u591a\u6b3eHuawei\u4ea7\u54c1\u5185\u5b58\u6cc4\u9732\u6f0f\u6d1e\uff08CNVD-2018-07349\uff09"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.


Loading…