CVE-2017-17141

Published: Mar 5, 2018Modified: Nov 21, 2024

3.7

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 2.2 / Impact: 1.4

Source: NVD

Description

Huawei S12700 V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R007C20; V200R008C00; V200R009C00;S1700 V200R006C10; V200R009C00;S2700 V100R006C03; V200R003C00; V200R005C00; V200R006C00; V200R006C10; V200R007C00; V200R007C00B050; V200R007C00SPC009T; V200R007C00SPC019T; V200R008C00; V200R009C00;S3700 V100R006C03;S5700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R003C02; V200R005C00; V200R005C01; V200R005C02; V200R005C03; V200R006C00; V200R007C00; V200R008C00; V200R009C00;S6700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R005C01; V200R005C02; V200R008C00; V200R009C00;S7700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R006C00; V200R006C01; V200R007C00; V200R007C01; V200R008C00; V200R008C06; V200R009C00;S9700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R008C00; V200R009C00 have a memory leak vulnerability. In some specific conditions, if attackers send specific malformed MPLS Service PING messages to the affected products, products do not release the memory when handling the packets. So successful exploit will result in memory leak of the affected products.

Affected (65)

Products: Huawei: S12700 Firmware, S1700 Firmware, S2700 Firmware, S3700 Firmware, S5700 Firmware, S6700 Firmware, S7700 Firmware, S9700 Firmware

8 products

Configuration A

7 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S12700 Firmware	Version v200r005c00
Huawei S12700 Firmware	Version v200r006c00
Huawei S12700 Firmware	Version v200r007c00
Huawei S12700 Firmware	Version v200r007c01
Huawei S12700 Firmware	Version v200r007c20
Huawei S12700 Firmware	Version v200r008c00
Huawei S12700 Firmware	Version v200r009c00

Running on/with	Platform Versions
Huawei S12700	All versions

Configuration B

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S1700 Firmware	Version v200r006c10
Huawei S1700 Firmware	Version v200r009c00

Running on/with	Platform Versions
Huawei S1700	All versions

Configuration C

11 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S2700 Firmware	Version v100r006c03
Huawei S2700 Firmware	Version v200r003c00
Huawei S2700 Firmware	Version v200r005c00
Huawei S2700 Firmware	Version v200r006c00
Huawei S2700 Firmware	Version v200r006c10
Huawei S2700 Firmware	Version v200r007c00
Huawei S2700 Firmware	Version v200r007c00b050
Huawei S2700 Firmware	Version v200r007c00spc009t
Huawei S2700 Firmware	Version v200r007c00spc019t
Huawei S2700 Firmware	Version v200r008c00
Huawei S2700 Firmware	Version v200r009c00

Running on/with	Platform Versions
Huawei S2700	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S3700 Firmware	Version v100r006c03

Running on/with	Platform Versions
Huawei S3700	All versions

Configuration E

13 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S5700 Firmware	Version v200r001c00
Huawei S5700 Firmware	Version v200r001c01
Huawei S5700 Firmware	Version v200r002c00
Huawei S5700 Firmware	Version v200r003c00
Huawei S5700 Firmware	Version v200r003c02
Huawei S5700 Firmware	Version v200r005c00
Huawei S5700 Firmware	Version v200r005c01
Huawei S5700 Firmware	Version v200r005c02
Huawei S5700 Firmware	Version v200r005c03
Huawei S5700 Firmware	Version v200r006c00
Huawei S5700 Firmware	Version v200r007c00
Huawei S5700 Firmware	Version v200r008c00
Huawei S5700 Firmware	Version v200r009c00

Running on/with	Platform Versions
Huawei S5700	All versions

Configuration F

9 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S6700 Firmware	Version v200r001c00
Huawei S6700 Firmware	Version v200r001c01
Huawei S6700 Firmware	Version v200r002c00
Huawei S6700 Firmware	Version v200r003c00
Huawei S6700 Firmware	Version v200r005c00
Huawei S6700 Firmware	Version v200r005c01
Huawei S6700 Firmware	Version v200r005c02
Huawei S6700 Firmware	Version v200r008c00
Huawei S6700 Firmware	Version v200r009c00

Running on/with	Platform Versions
Huawei S6700	All versions

Configuration G

12 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S7700 Firmware	Version v200r001c00
Huawei S7700 Firmware	Version v200r001c01
Huawei S7700 Firmware	Version v200r002c00
Huawei S7700 Firmware	Version v200r003c00
Huawei S7700 Firmware	Version v200r005c00
Huawei S7700 Firmware	Version v200r006c00
Huawei S7700 Firmware	Version v200r006c01
Huawei S7700 Firmware	Version v200r007c00
Huawei S7700 Firmware	Version v200r007c01
Huawei S7700 Firmware	Version v200r008c00
Huawei S7700 Firmware	Version v200r008c06
Huawei S7700 Firmware	Version v200r009c00

Running on/with	Platform Versions
Huawei S7700	All versions

Configuration H

10 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S9700 Firmware	Version v200r001c00
Huawei S9700 Firmware	Version v200r001c01
Huawei S9700 Firmware	Version v200r002c00
Huawei S9700 Firmware	Version v200r003c00
Huawei S9700 Firmware	Version v200r005c00
Huawei S9700 Firmware	Version v200r006c00
Huawei S9700 Firmware	Version v200r007c00
Huawei S9700 Firmware	Version v200r007c01
Huawei S9700 Firmware	Version v200r008c00
Huawei S9700 Firmware	Version v200r009c00

Running on/with	Platform Versions
Huawei S9700	All versions

Related CWEs

CWE-772

Missing Release of Resource after Effective Lifetime

The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.

References (2)

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-mpls-en

Source: psirt@huawei.com

Vendor Advisory

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-mpls-en

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.