Security Advisory - ICMPv6 DoS Vulnerability in Huawei Switches

Multiple Huawei switches improperly release memory for ICMPv6 packets of a specific type. After the switch receives a specially crafted ICMPv6 packet, memory leak occurs, causing the switch to restart if the allocated memory is exhausted. (Vulnerability ID: HWPSIRT-2015-11034)

This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2015-8676.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160113-02-switch-en