cnvd-2018-08040
Vulnerability from cnvd
Title: Huawei多款产品H323协议空指针引用漏洞
Description:
AR120-S、AR1200、DP300、RSE6500、Secospace USG6300、ViewPoint 8660等都是中国华为（Huawei）公司的网络设备。
Huawei多款产品H323协议存在空指针引用漏洞，攻击者无需认证即可发送畸形报文到受影响设备。由于报文校验不充分，成功利用可以导致进程崩溃。
Severity: 中
Patch Name: Huawei多款产品H323协议空指针引用漏洞的补丁
Patch Description:
AR120-S、AR1200、DP300、RSE6500、Secospace USG6300、ViewPoint 8660等都是中国华为（Huawei）公司的网络设备。
Huawei多款产品H323协议存在空指针引用漏洞，攻击者无需认证即可发送畸形报文到受影响设备。由于报文校验不充分，成功利用可以导致进程崩溃。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description:
用户可参考如下厂商提供的安全公告获取补丁以修复该漏洞： http://www.huawei.com/cn/psirt/security-advisories/2017/huawei-sa-20171227-01-h323-cn
Reference: http://www.huawei.com/cn/psirt/security-advisories/2017/huawei-sa-20171227-01-h323-cn
Impacted products
| Name | ['Huawei DP300 V500R002C00', 'Huawei RSE6500 V500R002C00', 'Huawei ViewPoint 8660 V100R008C03', 'Huawei AR120-S V200R006C10', 'Huawei AR120-S V200R007C00', 'Huawei AR120-S V200R008C20', 'Huawei AR120-S V200R008C30', 'Huawei AR1200 V200R006C10', 'Huawei AR1200 V200R006C13', 'Huawei AR1200 V200R007C00', 'Huawei AR1200 V200R007C01', 'Huawei AR1200 V200R007C02', 'Huawei AR1200 V200R008C20', 'Huawei AR1200 V200R008C30', 'Huawei Secospace USG6300 V100R001C10', 'Huawei Secospace USG6300 V100R001C20', 'Huawei Secospace USG6300 V100R001C30', 'Huawei Secospace USG6300 V500R001C00', 'Huawei Secospace USG6300 V500R001C20', 'Huawei Secospace USG6300 V500R001C30', 'Huawei Secospace USG6300 V500R001C50'] |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2017-17255"
}
},
"description": "AR120-S\u3001AR1200\u3001DP300\u3001RSE6500\u3001Secospace USG6300\u3001ViewPoint 8660\u7b49\u90fd\u662f\u4e2d\u56fd\u534e\u4e3a\uff08Huawei\uff09\u516c\u53f8\u7684\u7f51\u7edc\u8bbe\u5907\u3002\r\n\r\nHuawei\u591a\u6b3e\u4ea7\u54c1H323\u534f\u8bae\u5b58\u5728\u7a7a\u6307\u9488\u5f15\u7528\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u65e0\u9700\u8ba4\u8bc1\u5373\u53ef\u53d1\u9001\u7578\u5f62\u62a5\u6587\u5230\u53d7\u5f71\u54cd\u8bbe\u5907\u3002\u7531\u4e8e\u62a5\u6587\u6821\u9a8c\u4e0d\u5145\u5206\uff0c\u6210\u529f\u5229\u7528\u53ef\u4ee5\u5bfc\u81f4\u8fdb\u7a0b\u5d29\u6e83\u3002",
"discovererName": "Huawei",
"formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u5382\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u53d6\u8865\u4e01\u4ee5\u4fee\u590d\u8be5\u6f0f\u6d1e\uff1a\r\nhttp://www.huawei.com/cn/psirt/security-advisories/2017/huawei-sa-20171227-01-h323-cn",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2018-08040",
"openTime": "2018-04-20",
"patchDescription": "AR120-S\u3001AR1200\u3001DP300\u3001RSE6500\u3001Secospace USG6300\u3001ViewPoint 8660\u7b49\u90fd\u662f\u4e2d\u56fd\u534e\u4e3a\uff08Huawei\uff09\u516c\u53f8\u7684\u7f51\u7edc\u8bbe\u5907\u3002\r\n\r\nHuawei\u591a\u6b3e\u4ea7\u54c1H323\u534f\u8bae\u5b58\u5728\u7a7a\u6307\u9488\u5f15\u7528\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u65e0\u9700\u8ba4\u8bc1\u5373\u53ef\u53d1\u9001\u7578\u5f62\u62a5\u6587\u5230\u53d7\u5f71\u54cd\u8bbe\u5907\u3002\u7531\u4e8e\u62a5\u6587\u6821\u9a8c\u4e0d\u5145\u5206\uff0c\u6210\u529f\u5229\u7528\u53ef\u4ee5\u5bfc\u81f4\u8fdb\u7a0b\u5d29\u6e83\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Huawei\u591a\u6b3e\u4ea7\u54c1H323\u534f\u8bae\u7a7a\u6307\u9488\u5f15\u7528\u6f0f\u6d1e\u7684\u8865\u4e01",
"products": {
"product": [
"Huawei DP300 V500R002C00",
"Huawei RSE6500 V500R002C00",
"Huawei ViewPoint 8660 V100R008C03",
"Huawei AR120-S V200R006C10",
"Huawei AR120-S V200R007C00",
"Huawei AR120-S V200R008C20",
"Huawei AR120-S V200R008C30",
"Huawei AR1200 V200R006C10",
"Huawei AR1200 V200R006C13",
"Huawei AR1200 V200R007C00",
"Huawei AR1200 V200R007C01",
"Huawei AR1200 V200R007C02",
"Huawei AR1200 V200R008C20",
"Huawei AR1200 V200R008C30",
"Huawei Secospace USG6300 V100R001C10",
"Huawei Secospace USG6300 V100R001C20",
"Huawei Secospace USG6300 V100R001C30",
"Huawei Secospace USG6300 V500R001C00",
"Huawei Secospace USG6300 V500R001C20",
"Huawei Secospace USG6300 V500R001C30",
"Huawei Secospace USG6300 V500R001C50"
]
},
"referenceLink": "http://www.huawei.com/cn/psirt/security-advisories/2017/huawei-sa-20171227-01-h323-cn",
"serverity": "\u4e2d",
"submitTime": "2018-04-19",
"title": "Huawei\u591a\u6b3e\u4ea7\u54c1H323\u534f\u8bae\u7a7a\u6307\u9488\u5f15\u7528\u6f0f\u6d1e"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…