Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-17330

Huawei AR3200 V200R005C32; V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20; V200R008C30; NGFW Module V500R001C00; V500R001C20

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
huawei

Description

Huawei AR3200 V200R005C32; V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20; V200R008C30; NGFW Module V500R001C00; V500R001C20; V500R002C00 have a memory leak vulnerability. The software does not release allocated memory properly when parse XML element data. An authenticated attacker could upload a crafted XML file, successful exploit could cause the system service abnormal since run out of memory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Huawei Technologies Co., Ltd. AR3200; NGFW Module

  • AR3200 V200R005C32affected
  • V200R006C10affected
  • V200R006C11affected
  • V200R007C00affected
  • V200R007C01affected
  • V200R007C02affected
  • V200R008C00affected
  • V200R008C10affected
  • V200R008C20affected
  • V200R008C30affected
  • NGFW Module V500R001C00affected
  • V500R001C20affected
  • V500R002C00affected

References