Security Advisory - Memory Leak Vulnerability in Several Huawei Products

There is a vulnerability in several Huawei devices: USG series, NGFW module, IPS module, NIP series and AntiDDoS8000.

A memory leak vulnerability exists in these products. In hot standby networking where two devices are not directly connected, an attacker can craft a malformed packet, which exhausts the device’s memory resources and causes device reboot. (Vulnerability ID: HWPSIRT-2016-04004)

Huawei has released software updates to fix these vulnerabilities. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160615-01-standby-en