CVE-2017-17308

SCCPX module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 has an invalid memory access vulnerability. An unauthenticated, remote...

The vulnerability of the ReadImage function in the Sam2p image conversion utility allows a attacker to cause a service failure or exert other effects.

The vulnerability of the ReadImage function input-bmp.ci in the Sam2p image conversion utility is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions or other adverse effects...

The vulnerability of the blkcg_init_queue function in the Linux operating system allows a hacker to cause a service failure or exert other effects.

The vulnerability of the blkcginitqueue function in the Linux kernel’s block/blk-cgroup.c file is due to the repeated release of memory. Exploiting this vulnerability could allow an attacker to cause a service failure or have other adverse effects...

The vulnerability of the gplotRead and ptaReadStream functions in the Leptonica image processing library, which allows a hacker to cause a service failure or exert other effects.

The vulnerability of the gplotRead and ptaReadStream functions in the Leptonica image processing library is related to buffer overflow in the stack %s in the fscanf and sscanf functions. Exploiting this vulnerability can allow a malicious actor to cause service failures by using a specially craft...

The vulnerability of the functions snd_seq_write and snd_seq_ioctl_set_client_pool (seq_clientmgr.c) in the Linux kernel sound subsystem allows a attacker to cause a service failure.

The vulnerability of the sndseqwrite and sndseqioctlsetclientpool functions in the Linux kernel’s audio subsystem is related to multiprogramming errors race conditions. Exploiting this vulnerability can allow a remote attacker to cause service failures...

CVE-2017-17282

SCCP Signalling Connection Control Part module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 has a buffer overflow vulnerability. An...

CVE-2017-17327

Huawei smartphones with software of MHA-AL00AC00B125 have an improper resource management vulnerability. The software does not properly manage the resource when do device register operation. An attacker tricks the user who has root privilege to install a crafted application, successful exploit...

CVE-2017-17200

Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an out-of-bounds read vulnerability due to the improper processing of malformed H323...

Vulnerability of the Server:Replication component of the MySQL database management system, which allows a hacker to modify, add, or delete MySQL data, or cause service interruptions.

The vulnerability of the Server:Replication component of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to remotely modify, add, or delete MySQL data, or cause service failures...

Vulnerability of the Server:Partition component of the MySQL database management system, which allows attackers to gain privileges to modify, add, or delete data, or to cause service interruptions.

The vulnerability of the Server:Partition component of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain privileges to modify, add, or delete data, or cause service failures...

The vulnerability of the InnoDB component of the MySQL database management system allows a hacker to gain privileges for creating, deleting, or modifying data, or to cause service interruptions.

The vulnerability of the InnoDB component of the MySQL database management system is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to gain privileges necessary for creating, deleting, or modifying MySQL data, or to cause service failures...

The vulnerability of the Junos operating system, related to improper code generation, allows a perpetrator to execute arbitrary code or cause service failures.

The vulnerability of the Junos operating system is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to enhance their privileges and gain full control over the device by executing arbitrary commands or code on the target device. Alternatively,...

The vulnerability of the hidden content checking component in the SAP NetWeaver software integration platform allows a perpetrator to access confidential information or cause service failures.

The vulnerability of the hidden content checking component in the SAP NetWeaver software integration platform is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information or cause servic...

CVE-2017-17289

Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have a memory leak vulnerability. The software does not release allocated memory properly...

CVE-2017-17286

Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R005C32, V200R006C10, V200R007C00,...

CVE-2017-17202

Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R005C32, V200R006C10, V200R007C00,...

CVE-2017-15354

Huawei DP300, V500R002C00, RP200, V600R006C00, TE30, V100R001C10, V500R002C00,V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00,V600R006C00, TE60, V100R001C10, V500R002C00, V600R006C00, TX50,V500R002C00, V600R006C00 have a buffer overflow vulnerability. An attacker may send specially...

CVE-2017-15356

Huawei DP300, V500R002C00, RP200, V600R006C00, TE30, V100R001C10, V500R002C00,V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00,V600R006C00, TE60, V100R001C10, V500R002C00, V600R006C00, TX50,V500R002C00, V600R006C00 have a buffer overflow vulnerability. An attacker may send specially...

CVE-2017-15334

The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20,...

CVE-2017-15337

The SIP module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30,...