Security Advisory - Buffer Overflow Vulnerability in Huawei Several Products

There is a vulnerability in several Huawei devices: USG series and NGFW Module.

These products have a buffer overflow vulnerability in the Smart DNS function. An attacker may craft a malformed packet with illegitimate parameters, leading to denial of service or the potential execution of arbitrary code. (Vulnerability ID: HWPSIRT-2016-04006)

This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2016-4577.

Huawei has released software updates to fix these vulnerabilities. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160511-01-dns-en