CVE-2017-17164

Huawei Secospace AntiDDoS8000 V500R001C20SPC500 have a memory leak vulnerability due to memory don't be released when the system open some function. An attacker could exploit it to cause memory leak, which may further lead to system exceptions...

CVE-2017-17162

CVE-2017-17162 affects Huawei Secospace USG6600 (V500R001C30SPC100/200/300) and USG9500 (V500R001C30SPC100/200/300). The vulnerability is a memory leak caused by memory not being released when a locally authenticated attacker repeatedly executes specific commands, potentially exhausting memory an...

CVE-2017-17163

Huawei Secospace USG6600 V500R001C30SPC100 has an Out-of-Bounds memory access vulnerability due to insufficient verification. An authenticated local attacker can make processing crash by executing some commands. The attacker can exploit this vulnerability to cause a denial of service...

CVE-2017-15332

CVE-2017-15332 corresponds to a memory-leak vulnerability in the H323 protocol across multiple Huawei products (e.g., AR, ARS, SRG, NetEngine, Secospace USG, etc.). The issue arises from insufficient verification/checks of H323 packets, allowing an unauthenticated, remote attacker to send crafted...

CVE-2017-15336

CVE-2017-15336 corresponds to buffer overflow vulnerabilities in the SIP backup feature across Huawei devices (DP300 and a broad range of modules and platforms including IPS, NGFW, NIP6300/6600/6800, RP200, ViewPoint, eSpace U1981, and Secospace USG/TE series). Root cause: insufficient validation...

CVE-2017-17163

CVE-2017-17163 affects Huawei Secospace USG6600 (V500R001C30SPC100). It is an Out-of-Bounds memory access vulnerability caused by insufficient verification. An authenticated local attacker can crash the device by issuing certain commands, resulting in a denial of service. Documents confirm the af...

CVE-2017-17164

CVE-2017-17164 concerns a memory leak in Huawei Secospace AntiDDoS8000 family (V500R001C20SPC500). The root cause is that memory is not released when the system opens certain functions, which may cause memory consumption growth and could lead to system exceptions. Affected product: Huawei Secospa...

CVE-2017-17162

Huawei Secospace USG6600 V500R001C30SPC100, Secospace USG6600 V500R001C30SPC200, Secospace USG6600 V500R001C30SPC300, USG9500 V500R001C30SPC100, USG9500 V500R001C30SPC200, USG9500 V500R001C30SPC300 have a memory leak vulnerability due to memory don't be released when an local authenticated attack...

Memory leak vulnerability in multiple Huawei firewall products

Huawei USG series products and Secospace USG series are Huawei's new generation of professional intrusion prevention and firewall products for customers in enterprises, IDCs, campus networks and carriers. A memory leakage vulnerability exists in several Huawei firewall products, which can be...

Huawei Secospace USG6600 Memory Access Out-of-Bounds Vulnerability

Huawei Secospace USG6600 is Huawei's 10Gb campus next-generation firewall for medium and large enterprises, organizations and next-generation data centers. The Huawei Secospace USG6600 memory access out-of-bounds vulnerability is due to a lack of program checksum. An authenticated local attacker...

Huawei Secospace AntiDDoS8000 Memory Leak Vulnerability

Huawei Secospace AntiDDoS8000 is a firewall product from Huawei, China. A memory leak vulnerability exists in Huawei Secospace AntiDDoS8000 V500R001C20SPC500 version, which is due to the program failing to properly free memory. An attacker could exploit this vulnerability to cause a device anomal...

IKEv2 Protocol Memory Leakage Vulnerability in Multiple Huawei Products

Huawei IPS Module, NGFW Module, NIP6300/6600 series products and Secospace USG series are the new generation of professional intrusion prevention and firewall products launched by Huawei for enterprise, IDC, campus network and carrier customers. A memory leak vulnerability exists in the IKEv2...

IKEv2 protocol memory out-of-bounds access vulnerability in multiple Huawei products (CNVD-2017-38287)

Huawei IPS Module, NGFW Module, NIP6300/6600 series products and Secospace USG series are the new generation of professional intrusion prevention and firewall products launched by Huawei for enterprise, IDC, campus network and carrier customers. A memory out-of-bounds access vulnerability exists ...

Memory Leak Vulnerability in Multiple Huawei Products

The NIP6300/6600 series products are Huawei's new-generation professional intrusion prevention products for customers in enterprises, IDCs, campus networks, and carriers, etc. The Secospace USG6300/6500 is Huawei's new-generation, T-class, all-in-one data center firewall for cloud service...

CVE-2017-8147

AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with software V200R005C20SPC026T,AR3200 V200R005C20SPC026T,CloudEngine 12800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00,...

CVE-2017-8147

AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with software V200R005C20SPC026T,AR3200 V200R005C20SPC026T,CloudEngine 12800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00,...

CVE-2017-8147

CVE-2017-8147 corresponds to a MaxAge LSA vulnerability in OSPF on Huawei products (e.g., AC6005/AC6605/CloudEngine series, S-series, USG/SECOSPACE lines, etc.). The issue arises from improper OSPF handling, where receiving specific LSA packets causes the Link State Age to be set to MaxAge (3600 ...

CVE-2016-8802

The security policy processing module in Huawei Secospace USG6300 with software V500R001C20SPC100, V500R001C20SPC101, V500R001C20SPC200; Secospace USG6500 with software V500R001C20SPC100, V500R001C20SPC101, V500R001C20SPC200; Secospace USG6600 with software V500R001C20SPC100, V500R001C20SPC101,...

CVE-2016-8795

Huawei CloudEngine 12800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 5800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 6800 with software V100R002C00, V100R003C00, V100R003C10,...

CVE-2016-8795

Huawei CloudEngine 12800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 5800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 6800 with software V100R002C00, V100R003C00, V100R003C10,...