CVE-2017-17141 — Huawei Technologies Co., Ltd. / S12700; S1700; S2700; S3700; S5700; S6700; S7700; S9700

Description (CNA)

Huawei S12700 V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R007C20; V200R008C00; V200R009C00;S1700 V200R006C10; V200R009C00;S2700 V100R006C03; V200R003C00; V200R005C00; V200R006C00; V200R006C10; V200R007C00; V200R007C00B050; V200R007C00SPC009T; V200R007C00SPC019T; V200R008C00; V200R009C00;S3700 V100R006C03;S5700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R003C02; V200R005C00; V200R005C01; V200R005C02; V200R005C03; V200R006C00; V200R007C00; V200R008C00; V200R009C00;S6700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R005C01; V200R005C02; V200R008C00; V200R009C00;S7700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R006C00; V200R006C01; V200R007C00; V200R007C01; V200R008C00; V200R008C06; V200R009C00;S9700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R008C00; V200R009C00 have a memory leak vulnerability. In some specific conditions, if attackers send specific malformed MPLS Service PING messages to the affected products, products do not release the memory when handling the packets. So successful exploit will result in memory leak of the affected products.

Affected (CNA)

Vendor / product	Versions
Huawei Technologies Co., Ltd. / S12700; S1700; S2700; S3700; S5700; S6700; S7700; S9700	affected S12700 V200R005C00; affected V200R006C00; affected V200R007C00; affected V200R007C01; affected V200R007C20; affected V200R008C00; affected V200R009C00; affected S1700 V200R006C10; affected S2700 V100R006C03; affected V200R003C00; affected V200R005C00; affected V200R006C10; affected V200R007C00B050; affected V200R007C00SPC009T; affected V200R007C00SPC019T; affected S3700 V100R006C03; affected S5700 V200R001C00; affected V200R001C01; affected V200R002C00; affected V200R003C02; affected V200R005C01; affected V200R005C02; affected V200R005C03; affected S6700 V200R001C00; affected S7700 V200R001C00; affected V200R006C01; affected V200R008C06; affected S9700 V200R001C00

Vendor / product

Versions

Huawei Technologies Co., Ltd. / S12700; S1700; S2700; S3700; S5700; S6700; S7700; S9700

affected S12700 V200R005C00; affected V200R006C00; affected V200R007C00; affected V200R007C01; affected V200R007C20; affected V200R008C00; affected V200R009C00; affected S1700 V200R006C10; affected S2700 V100R006C03; affected V200R003C00; affected V200R005C00; affected V200R006C10; affected V200R007C00B050; affected V200R007C00SPC009T; affected V200R007C00SPC019T; affected S3700 V100R006C03; affected S5700 V200R001C00; affected V200R001C01; affected V200R002C00; affected V200R003C02; affected V200R005C01; affected V200R005C02; affected V200R005C03; affected S6700 V200R001C00; affected S7700 V200R001C00; affected V200R006C01; affected V200R008C06; affected S9700 V200R001C00

CWE

No CWE identifiers supplied.

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-mpls-en

ADP enrichment

CVE

No English description supplied.

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-mpls-en