CVE-2021-22312
Summary
| CVE | CVE-2021-22312 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-04-08 19:15:00 UTC |
| Updated | 2021-04-20 19:11:00 UTC |
| Description | There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory properly, successful exploit may cause some service abnormal. Affected product include some versions of IPS Module, NGFW Module, Secospace USG6300, Secospace USG6500, Secospace USG6600 and USG9500. |
Risk And Classification
Problem Types: CWE-401
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Huawei | Ips6000e | - | All | All | All |
| Operating System | Huawei | Ips6000e Firmware | v600r006c00 | All | All | All |
| Hardware | Huawei | Ips Module | - | All | All | All |
| Operating System | Huawei | Ips Module Firmware | v500r005c00spc100 | All | All | All |
| Operating System | Huawei | Ips Module Firmware | v500r005c00spc200 | All | All | All |
| Hardware | Huawei | Ngfw Module | - | All | All | All |
| Operating System | Huawei | Ngfw Module Firmware | v500r005c00spc100 | All | All | All |
| Operating System | Huawei | Ngfw Module Firmware | v500r005c00spc200 | All | All | All |
| Hardware | Huawei | Nip6000e | - | All | All | All |
| Operating System | Huawei | Nip6000e Firmware | v600r006c00 | All | All | All |
| Hardware | Huawei | Nip6300 | - | All | All | All |
| Operating System | Huawei | Nip6300 Firmware | v500r001c30spc200 | All | All | All |
| Operating System | Huawei | Nip6300 Firmware | v500r001c30spc600 | All | All | All |
| Operating System | Huawei | Nip6300 Firmware | v500r001c60spc500 | All | All | All |
| Operating System | Huawei | Nip6300 Firmware | v500r005c00spc100 | All | All | All |
| Operating System | Huawei | Nip6300 Firmware | v500r005c00spc200 | All | All | All |
| Hardware | Huawei | Nip6600 | - | All | All | All |
| Operating System | Huawei | Nip6600 Firmware | v500r001c30spc200 | All | All | All |
| Operating System | Huawei | Nip6600 Firmware | v500r001c30spc600 | All | All | All |
| Operating System | Huawei | Nip6600 Firmware | v500r001c60spc500 | All | All | All |
| Operating System | Huawei | Nip6600 Firmware | v500r005c00spc100 | All | All | All |
| Operating System | Huawei | Nip6600 Firmware | v500r005c00spc200 | All | All | All |
| Hardware | Huawei | Nip6800 | - | All | All | All |
| Operating System | Huawei | Nip6800 Firmware | v500r001c30spc200 | All | All | All |
| Operating System | Huawei | Nip6800 Firmware | v500r001c30spc600 | All | All | All |
| Operating System | Huawei | Nip6800 Firmware | v500r001c60spc500 | All | All | All |
| Operating System | Huawei | Nip6800 Firmware | v500r005c00spc100 | All | All | All |
| Operating System | Huawei | Nip6800 Firmware | v500r005c00spc200 | All | All | All |
| Hardware | Huawei | Secospace Usg6300 | - | All | All | All |
| Operating System | Huawei | Secospace Usg6300 Firmware | v500r001c30spc200 | All | All | All |
| Operating System | Huawei | Secospace Usg6300 Firmware | v500r001c30spc600 | All | All | All |
| Operating System | Huawei | Secospace Usg6300 Firmware | v500r001c60spc500 | All | All | All |
| Operating System | Huawei | Secospace Usg6300 Firmware | v500r005c00spc100 | All | All | All |
| Operating System | Huawei | Secospace Usg6300 Firmware | v500r005c00spc200 | All | All | All |
| Hardware | Huawei | Secospace Usg6500 | - | All | All | All |
| Operating System | Huawei | Secospace Usg6500 Firmware | v500r001c30spc200 | All | All | All |
| Operating System | Huawei | Secospace Usg6500 Firmware | v500r001c30spc600 | All | All | All |
| Operating System | Huawei | Secospace Usg6500 Firmware | v500r001c60spc500 | All | All | All |
| Operating System | Huawei | Secospace Usg6500 Firmware | v500r005c00spc100 | All | All | All |
| Operating System | Huawei | Secospace Usg6500 Firmware | v500r005c00spc200 | All | All | All |
| Hardware | Huawei | Secospace Usg6600 | - | All | All | All |
| Operating System | Huawei | Secospace Usg6600 Firmware | v500r001c30spc200 | All | All | All |
| Operating System | Huawei | Secospace Usg6600 Firmware | v500r001c30spc600 | All | All | All |
| Operating System | Huawei | Secospace Usg6600 Firmware | v500r001c60spc500 | All | All | All |
| Operating System | Huawei | Secospace Usg6600 Firmware | v500r005c00spc100 | All | All | All |
| Operating System | Huawei | Secospace Usg6600 Firmware | v500r005c00spc200 | All | All | All |
| Hardware | Huawei | Usg6000e | - | All | All | All |
| Operating System | Huawei | Usg6000e Firmware | v600r006c00 | All | All | All |
| Hardware | Huawei | Usg9500 | - | All | All | All |
| Operating System | Huawei | Usg9500 Firmware | v500r001c30spc200 | All | All | All |
| Operating System | Huawei | Usg9500 Firmware | v500r001c30spc600 | All | All | All |
| Operating System | Huawei | Usg9500 Firmware | v500r001c60spc500 | All | All | All |
| Operating System | Huawei | Usg9500 Firmware | v500r005c00spc100 | All | All | All |
| Operating System | Huawei | Usg9500 Firmware | v500r005c00spc200 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Advisory - Memory Leak Vulnerability in Some Huawei Products | MISC | www.huawei.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.