CVE-2017-17166
Summary
| CVE | CVE-2017-17166 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-02-15 16:29:00 UTC |
| Updated | 2018-02-26 15:21:00 UTC |
| Description | Huawei DP300 V500R002C00, Secospace USG6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, TP3206 V100R002C00, VP9660 V500R002C00, V500R002C10 have a resource exhaustion vulnerability. The software does not process certain field of H.323 message properly, a remote unauthenticated attacker could send crafted H.323 message to the device, successful exploit could cause certain service unavailable since the stack memory is exhausted. |
Risk And Classification
Problem Types: CWE-400
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Huawei | Dp300 | - | All | All | All |
| Hardware | Huawei | Dp300 | - | All | All | All |
| Operating System | Huawei | Dp300 Firmware | v500r002c00 | All | All | All |
| Operating System | Huawei | Dp300 Firmware | v500r002c00 | All | All | All |
| Hardware | Huawei | Secospace Usg6300 | - | All | All | All |
| Hardware | Huawei | Secospace Usg6300 | - | All | All | All |
| Operating System | Huawei | Secospace Usg6300 Firmware | v500r001c00 | All | All | All |
| Operating System | Huawei | Secospace Usg6300 Firmware | v500r001c20 | All | All | All |
| Operating System | Huawei | Secospace Usg6300 Firmware | v500r001c30 | All | All | All |
| Operating System | Huawei | Secospace Usg6300 Firmware | v500r001c50 | All | All | All |
| Operating System | Huawei | Secospace Usg6300 Firmware | v500r001c00 | All | All | All |
| Operating System | Huawei | Secospace Usg6300 Firmware | v500r001c20 | All | All | All |
| Operating System | Huawei | Secospace Usg6300 Firmware | v500r001c30 | All | All | All |
| Operating System | Huawei | Secospace Usg6300 Firmware | v500r001c50 | All | All | All |
| Hardware | Huawei | Secospace Usg6500 | - | All | All | All |
| Hardware | Huawei | Secospace Usg6500 | - | All | All | All |
| Operating System | Huawei | Secospace Usg6500 Firmware | v500r001c00 | All | All | All |
| Operating System | Huawei | Secospace Usg6500 Firmware | v500r001c20 | All | All | All |
| Operating System | Huawei | Secospace Usg6500 Firmware | v500r001c30 | All | All | All |
| Operating System | Huawei | Secospace Usg6500 Firmware | v500r001c50 | All | All | All |
| Operating System | Huawei | Secospace Usg6500 Firmware | v500r001c00 | All | All | All |
| Operating System | Huawei | Secospace Usg6500 Firmware | v500r001c20 | All | All | All |
| Operating System | Huawei | Secospace Usg6500 Firmware | v500r001c30 | All | All | All |
| Operating System | Huawei | Secospace Usg6500 Firmware | v500r001c50 | All | All | All |
| Hardware | Huawei | Secospace Usg6600 | - | All | All | All |
| Hardware | Huawei | Secospace Usg6600 | - | All | All | All |
| Operating System | Huawei | Secospace Usg6600 Firmware | v500r001c00 | All | All | All |
| Operating System | Huawei | Secospace Usg6600 Firmware | v500r001c20 | All | All | All |
| Operating System | Huawei | Secospace Usg6600 Firmware | v500r001c30 | All | All | All |
| Operating System | Huawei | Secospace Usg6600 Firmware | v500r001c50 | All | All | All |
| Operating System | Huawei | Secospace Usg6600 Firmware | v500r001c00 | All | All | All |
| Operating System | Huawei | Secospace Usg6600 Firmware | v500r001c20 | All | All | All |
| Operating System | Huawei | Secospace Usg6600 Firmware | v500r001c30 | All | All | All |
| Operating System | Huawei | Secospace Usg6600 Firmware | v500r001c50 | All | All | All |
| Hardware | Huawei | Tp3206 | - | All | All | All |
| Hardware | Huawei | Tp3206 | - | All | All | All |
| Operating System | Huawei | Tp3206 Firmware | v100r002c00 | All | All | All |
| Operating System | Huawei | Tp3206 Firmware | v100r002c00 | All | All | All |
| Hardware | Huawei | Vp9660 | - | All | All | All |
| Hardware | Huawei | Vp9660 | - | All | All | All |
| Operating System | Huawei | Vp9660 Firmware | v500r002c00 | All | All | All |
| Operating System | Huawei | Vp9660 Firmware | v500r002c10 | All | All | All |
| Operating System | Huawei | Vp9660 Firmware | v500r002c00 | All | All | All |
| Operating System | Huawei | Vp9660 Firmware | v500r002c10 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Advisory - Resource Exhaustion Vulnerability on Several Products | CONFIRM | www.huawei.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.