Lucene search
Huawei TechnologiesHUAWEI-SA-20170720-01-OSPFHistoryJul 20, 2017 - 12:00 a.m.
Security Advisory - MaxAge LSA Vulnerability in OSPF Protocol of Some Huawei Products
2017-07-2000:00:00
Huawei Technologies
www.huawei.com
13
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
37.9%
Some Huawei products have a MaxAge LSA vulnerability due to improper OSPF implementation. When the device receives special LSA packets, the LS (Link Status) age would be set to MaxAge, 3600 seconds. An attacker can exploit this vulnerability to poison the route table and launch a DoS attack. (Vulnerability ID: HWPSIRT-2017-06059)
This vulnerability has been assigned a CVE ID: CVE-2017-8147.
Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170720-01-ospf-en
Affected configurations
Node
huaweiac6005MatchV200R006C10SPC200
ORhuaweiac6605MatchV200R006C10SPC200
ORhuaweiar1200MatchV200R005C10CP0582T
ORhuaweiar1200MatchV200R005C10HP0581T
ORhuaweiar1200MatchV200R005C20SPC026T
ORhuaweiar200MatchV200R005C20SPC026T
ORhuaweiar3200MatchV200R005C20SPC026T
ORhuaweicloudengine_12800MatchV100R003C00
ORhuaweicloudengine_12800MatchV100R005C00
ORhuaweicloudengine_12800MatchV100R005C10
ORhuaweicloudengine_12800MatchV100R006C00
ORhuaweicloudengine_12800MatchV200R001C00
ORhuaweicloudengine_5800MatchV100R003C00
ORhuaweicloudengine_5800MatchV100R005C00
ORhuaweicloudengine_5800MatchV100R005C10
ORhuaweicloudengine_5800MatchV100R006C00
ORhuaweicloudengine_5800MatchV200R001C00
ORhuaweicloudengine_6800MatchV100R003C00
ORhuaweicloudengine_6800MatchV100R005C00
ORhuaweicloudengine_6800MatchV100R005C10
ORhuaweicloudengine_6800MatchV100R006C00
ORhuaweicloudengine_6800MatchV200R001C00
ORhuaweicloudengine_7800MatchV100R003C00
ORhuaweicloudengine_7800MatchV100R005C00
ORhuaweicloudengine_7800MatchV100R005C10
ORhuaweicloudengine_7800MatchV100R006C00
ORhuaweicloudengine_7800MatchV200R001C00
ORhuaweicloudengine_8800MatchV100R006C00
ORhuaweicloudengine_8800MatchV200R001C00
ORhuaweie600MatchV200R008C00
ORhuaweine20e-sMatchV800R005C01SPC100
ORhuaweine20e-sMatchV800R005C01SPC200
ORhuaweine20e-sMatchV800R006C00SPC300
ORhuaweine20e-sMatchV800R007C00SPC200
ORhuaweine20e-sMatchV800R007C10SPC100
ORhuaweine20e-sMatchV800R008C10SPC300
ORhuaweine20e-sMatchV800R008C10SPC500
ORhuaweine40eMatchV600R003C00
ORhuaweine40eMatchV600R006C00
ORhuaweine40eMatchV600R007C00
ORhuaweine40eMatchV600R008C10
ORhuaweine40eMatchV600R008C20
ORhuaweine40eMatchV600R009C00
ORhuaweine40eMatchV800R005C01
ORhuaweine40eMatchV800R006C00
ORhuaweine40eMatchV800R006C20
ORhuaweine40eMatchV800R006C30
ORhuaweine40eMatchV800R007C00
ORhuaweine40eMatchV800R008C00
ORhuaweine40eMatchV800R008C10
ORhuaweine40eMatchV800R009C00
ORhuaweine40e-mMatchV800R007C10
ORhuaweine40e-mMatchV800R008C00
ORhuaweine40e-mMatchV800R008C10
ORhuaweine40e-mMatchV800R009C00
ORhuaweis12700MatchV200R005C00
ORhuaweis12700MatchV200R006C00
ORhuaweis12700MatchV200R007C00
ORhuaweis12700MatchV200R008C00
ORhuaweis1700MatchV100R006C00
ORhuaweis1700MatchV100R007C00
ORhuaweis1700MatchV200R006C00
ORhuaweis2300MatchV100R005C00
ORhuaweis2300MatchV100R006C00
ORhuaweis2300MatchV100R006C03
ORhuaweis2300MatchV100R006C05
ORhuaweis2300MatchV200R003C00
ORhuaweis2300MatchV200R003C02
ORhuaweis2300MatchV200R003C10
ORhuaweis2300MatchV200R005C00
ORhuaweis2300MatchV200R005C01
ORhuaweis2300MatchV200R005C02
ORhuaweis2300MatchV200R005C03
ORhuaweis2300MatchV200R006C00
ORhuaweis2300MatchV200R007C00
ORhuaweis2300MatchV200R008C00
ORhuaweis2700MatchV100R005C00
ORhuaweis2700MatchV100R006C00
ORhuaweis2700MatchV100R006C03
ORhuaweis2700MatchV100R006C05
ORhuaweis2700MatchV200R003C00
ORhuaweis2700MatchV200R003C02
ORhuaweis2700MatchV200R003C10
ORhuaweis2700MatchV200R005C00
ORhuaweis2700MatchV200R005C01
ORhuaweis2700MatchV200R005C02
ORhuaweis2700MatchV200R005C03
ORhuaweis2700MatchV200R006C00
ORhuaweis2700MatchV200R007C00
ORhuaweis2700MatchV200R008C00
ORhuaweis5300MatchV100R005C00
ORhuaweis5300MatchV100R006C00
ORhuaweis5300MatchV100R006C01
ORhuaweis5300MatchV200R001C00
ORhuaweis5300MatchV200R001C01
ORhuaweis5300MatchV200R002C00
ORhuaweis5300MatchV200R003C00
ORhuaweis5300MatchV200R003C02
ORhuaweis5300MatchV200R003C10
ORhuaweis5300MatchV200R005C00
ORhuaweis5300MatchV200R006C00
ORhuaweis5300MatchV200R007C00
ORhuaweis5300MatchV200R008C00
ORhuaweis5700MatchV100R005C00
ORhuaweis5700MatchV100R006C00
ORhuaweis5700MatchV100R006C01
ORhuaweis5700MatchV200R001C00
ORhuaweis5700MatchV200R001C01
ORhuaweis5700MatchV200R002C00
ORhuaweis5700MatchV200R003C00
ORhuaweis5700MatchV200R003C02
ORhuaweis5700MatchV200R003C10
ORhuaweis5700MatchV200R005C00
ORhuaweis5700MatchV200R006C00
ORhuaweis5700MatchV200R007C00
ORhuaweis5700MatchV200R008C00
ORhuaweis6300MatchV100R006C00
ORhuaweis6300MatchV200R001C00
ORhuaweis6300MatchV200R001C01
ORhuaweis6300MatchV200R002C00
ORhuaweis6300MatchV200R003C00
ORhuaweis6300MatchV200R003C02
ORhuaweis6300MatchV200R003C10
ORhuaweis6300MatchV200R005C00
ORhuaweis6300MatchV200R008C00
ORhuaweis6700MatchV100R006C00
ORhuaweis6700MatchV200R001C00
ORhuaweis6700MatchV200R001C01
ORhuaweis6700MatchV200R002C00
ORhuaweis6700MatchV200R003C00
ORhuaweis6700MatchV200R003C02
ORhuaweis6700MatchV200R003C10
ORhuaweis6700MatchV200R005C00
ORhuaweis6700MatchV200R006C00
ORhuaweis6700MatchV200R007C00
ORhuaweis6700MatchV200R008C00
ORhuaweis7700MatchV100R003C00
ORhuaweis7700MatchV100R006C00
ORhuaweis7700MatchV200R001C00
ORhuaweis7700MatchV200R001C01
ORhuaweis7700MatchV200R002C00
ORhuaweis7700MatchV200R003C00
ORhuaweis7700MatchV200R005C00
ORhuaweis7700MatchV200R006C00
ORhuaweis7700MatchV200R007C00
ORhuaweis7700MatchV200R008C00
ORhuaweis9300MatchV100R001C00
ORhuaweis9300MatchV100R002C00
ORhuaweis9300MatchV100R003C00
ORhuaweis9300MatchV100R006C00
ORhuaweis9300MatchV200R001C00
ORhuaweis9300MatchV200R002C00
ORhuaweis9300MatchV200R003C00
ORhuaweis9300MatchV200R005C00
ORhuaweis9300MatchV200R006C00
ORhuaweis9300MatchV200R007C00
ORhuaweis9300MatchV200R008C00
ORhuaweis9300MatchV200R008C10
ORhuaweis9700MatchV200R001C00
ORhuaweis9700MatchV200R002C00
ORhuaweis9700MatchV200R003C00
ORhuaweis9700MatchV200R005C00
ORhuaweis9700MatchV200R006C00
ORhuaweis9700MatchV200R007C00
ORhuaweis9700MatchV200R008C00
ORhuaweisecospace_usg6600MatchV500R001C00
ORhuaweisecospace_usg6600MatchV500R001C20
ORhuaweisecospace_usg6600MatchV500R001C30
Related
cve
cve
CVE-2017-8147
2017-11-22 19:29:03
nvd
nvd
CVE-2017-8147
2017-11-22 19:29:03
openvas
openvas
prion
prion
Input validation
2017-11-22 19:29:00
cvelist
cvelist
CVE-2017-8147
2017-11-15 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
37.9%
Related for HUAWEI-SA-20170720-01-OSPF