Security Advisory - DoS Vulnerability in Huawei Switches

There is a DoS vulnerability caused by memory leak in some of Huawei products as affected products list below. For lacking of adequate input validation，attackers can craft and send a large number of malformed packets to the target device to exhaust the memory of the device and may cause the device to restart. (Vulnerability ID: HWPSIRT-2016-04022)

_ _

This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2016-6518.

Huawei has released software updates to fix these vulnerabilities. This advisory is available at the following link:

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160914-01-sep-en