CVE-2016-4577

Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300, USG6500, USG6600, and USG9500 firewalls with software before V500R001C20SPC100 allows remote attackers to cause a denial of service or execute arbitrary code via a crafted packet, related to "illegitimate parameters."

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2016-05-23

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Ngfw Module Firmware (Huawei)
• Secospace Usg6300 Firmware (Huawei)
• Secospace Usg6500 Firmware (Huawei)
• Secospace Usg6600 Firmware (Huawei)
• Usg9500 Firmware (Huawei)

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160511-01-dns-en
• http://www.securityfocus.com/bid/90532