Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v2q9-m664-5f32

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

CloudEngine 12800 products with versions of V200R019C00, V200R019C10SPC800, V200R019C00SPC600, V200R019C10; and CloudEngine 6800 products with versions of V200R019C00SPC800 have a denial of service vulnerability. Due to improper memory management, memory leakage may occur in some special cases. Attackers can perform a series of operations to exploit this vulnerability. Successful exploit may cause a denial of service.

CloudEngine 12800 products with versions of V200R019C00, V200R019C10SPC800, V200R019C00SPC600, V200R019C10; and CloudEngine 6800 products with versions of V200R019C00SPC800 have a denial of service vulnerability. Due to improper memory management, memory leakage may occur in some special cases. Attackers can perform a series of operations to exploit this vulnerability. Successful exploit may cause a denial of service.

EPSS

Процентиль: 40%
0.00182
Низкий

Дефекты

CWE-772

Связанные уязвимости

CVSS3: 7.5
nvd
больше 5 лет назад

There is a denial of service vulnerability in some Huawei products. Due to improper memory management, memory leakage may occur in some special cases. Attackers can perform a series of operations to exploit this vulnerability. Successful exploit may cause a denial of service. Affected product versions include: CloudEngine 12800 versions V200R019C00SPC800; CloudEngine 5800 versions V200R019C00SPC800; CloudEngine 6800 versions V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 versions V200R019C00SPC800; NE40E versions V800R011C00SPC200, V800R011C00SPC300, V800R011C10SPC100; NE40E-F versions V800R011C00SPC200, V800R011C10SPC100; NE40E-M versions V800R011C00SPC200, V800R011C10SPC100.

CVSS3: 7.5
fstec
больше 5 лет назад

Уязвимость микропрограммного обеспечения коммутаторов CloudEngine 12800, CloudEngine 5800, CloudEngine 6800, CloudEngine 7800, NE40E-F, NE40E-M, связанная с неосвобождением ресурса после истечения действительного срока его эксплуатирования, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 40%
0.00182
Низкий

Дефекты

CWE-772