Multiple Huawei Products CVE-2017-17330 Denial of Service Vulnerability

Bugtraq ID:	103511
Class:	Input Validation Error
CVE:	CVE-2017-17330
Remote:	Yes
Local:	No
Published:	Jun 12 2017 12:00AM
Updated:	Jun 12 2017 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Huawei NGFW Module V500R002C00 Huawei NGFW Module V500R001C20 Huawei NGFW Module V500R001C00 Huawei AR3200 V200R008C30 Huawei AR3200 V200R008C20 Huawei AR3200 V200R008C10 Huawei AR3200 V200R008C00 Huawei AR3200 V200R007C02 Huawei AR3200 V200R007C01 Huawei AR3200 V200R007C00 Huawei AR3200 V200R006C11 Huawei AR3200 V200R006C10 Huawei AR3200 V200R005C32
Not Vulnerable:	Huawei NGFW Module V500R002C10SPC100 Huawei AR3200 V200R009C00

Multiple Huawei Products CVE-2017-17330 Denial of Service Vulnerability

Multiple Huawei products are prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause denial-of-service conditions.

Multiple Huawei Products CVE-2017-17330 Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Huawei Products CVE-2017-17330 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple Huawei Products CVE-2017-17330 Denial of Service Vulnerability

References:

• Huawei Homepage (Huawei)
  
• Security Advisory - Memory Leak Vulnerability in Several Huawei Products (Huawei)