Security Advisory-Heap Overflow Vulnerability in Huawei eSap Platform

Huawei eSap software platform has four heap overflow vulnerabilities. Huawei products that have used this platform are affected. When receiving some special malformed packets, such devices access heap memory that is beyond the valid range and cause unexpected restart of the devices. If an attacker keeps sending such malformed packets, the devices will repeatedly restart, causing a denial of service (DoS) attack (Vulnerability ID: HWPSIRT-2014-0111).

This Vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2014-4705.

Huawei has provided fixed versions.