CVE-2021-40008

🗓️ 13 Dec 2021 15:48:05Reported by huaweiType

There is a memory leak vulnerability in CloudEngine 12800 V200R019C00SPC800, CloudEngine 5800 V200R019C00SPC800, CloudEngine 6800 V200R019C00SPC800 and CloudEngine 7800 V200R019C00SPC800. The software does not sufficiently track and release allocated memory while parse a series of crafted binary messages, which could consume remaining memory. Successful exploit could cause memory exhaust

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2021-40008	13 Dec 202118:12	–	circl
CNNVD	Huawei CloudEngine 安全漏洞	8 Dec 202100:00	–	cnnvd
CNVD	Huawei product memory leak vulnerability	10 Dec 202100:00	–	cnvd
Cvelist	CVE-2021-40008	13 Dec 202115:48	–	cvelist
EUVD	EUVD-2021-27198	7 Oct 202500:30	–	euvd
Huawei	Security Advisory - Memory Leak Vulnerability in Huawei Products	8 Dec 202100:00	–	huawei
NCSC	Vulnerability fixed in Huawei CloudEngine	8 Dec 202100:00	–	ncsc
NVD	CVE-2021-40008	13 Dec 202116:15	–	nvd
OpenVAS	Memory Leak Vulnerability in Huawei Products (huawei-sa-20211208-01-memleak)	16 Dec 202100:00	–	openvas
OSV	CVE-2021-40008	13 Dec 202116:15	–	osv

NVD

Vulners

Node

huawei cloudengine_7800_firmwareMatchv200r019c00spc800

AND

huawei cloudengine_7800Match-

Node

huawei cloudengine_6800_firmwareMatchv200r019c00spc800

AND

huawei cloudengine_6800Match-

Node

huawei cloudengine_5800_firmwareMatchv200r019c00spc800

AND

huawei cloudengine_5800Match-

Node

huawei cloudengine_12800_firmwareMatchv200r019c00spc800

AND

huawei cloudengine_12800Match-

[
  {
    "product": "CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "V200R019C00SPC800"
      }
    ]
  }
]

Source	Link
huawei	www.huawei.com/en/psirt/security-advisories/huawei-sa-20211208-01-memleak-en

21 Nov 2024 06:23Current

7.4High risk

Vulners AI Score7.4

CVSS 25

CVSS 3.17.5

EPSS0.00182

CWE-772