Security Advisory - Distributed Denial-of-Service Vulnerablility in Some Huawei Products

There is a DDoS vulnerability called “NXNSAttack” in some Huawei products. There is no effective limitation on the number of fetches performed when the DNS recursive server processes references. An attacker can exploit this vulnerability by sending a request for an attacker-controlled domain to a vulnerable DNS resolving server. Successful exploit can lead to a performance degradation of the recursive server, while the recursive server can also act as a reflector, resulting in a DDoS attack to target authoritative servers. (Vulnerability ID: HWPSIRT-2020-05822)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-8616.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200826-01-ddos-en