CVE-2017-17330
Huawei AR3200 V200R005C32; V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20; V200R008C30; NGFW Module V500R001C00; V500R001C20; V500R002C00 have a memory leak vulnerability. The software does not release allocated memory properly when parse XML element data. An authenticated attacker could upload a crafted XML file, successful exploit could cause the system service abnormal since run out of memory.
- Score
- CVSS 3.0 3.3 Low
- Status
- Modified - psirt@huawei.com
- Published
- 2018-03-09
- Last modified
- 2024-08-05
- Weaknesses
- CWE-772
Affected products
- Ar3200 Firmware (Huawei)
- Ngfw Module Firmware (Huawei)
- Ar3200 Ngfw Module (Huawei Technologies Co. Ltd.)
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-04-xml-en
