CVE-2017-17141

State: Published
Severity: Not scored
Published: Mar 5, 2018
Updated: Sep 17, 2024
Reserved: Dec 4, 2017

Description

Huawei S12700 V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R007C20; V200R008C00; V200R009C00;S1700 V200R006C10; V200R009C00;S2700 V100R006C03; V200R003C00; V200R005C00; V200R006C00; V200R006C10; V200R007C00; V200R007C00B050; V200R007C00SPC009T; V200R007C00SPC019T; V200R008C00; V200R009C00;S3700 V100R006C03;S5700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R003C02; V200R005C00; V200R005C01; V200R005C02; V200R005C03; V200R006C00; V200R007C00; V200R008C00; V200R009C00;S6700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R005C01; V200R005C02; V200R008C00; V200R009C00;S7700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R006C00; V200R006C01; V200R007C00; V200R007C01; V200R008C00; V200R008C06; V200R009C00;S9700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R008C00; V200R009C00 have a memory leak vulnerability. In some specific conditions, if attackers send specific malformed MPLS Service PING messages to the affected products, products do not release the memory when handling the packets. So successful exploit will result in memory leak of the affected products.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
S12700; S1700; S2700; S3700; S5700; S6700; S7700; S9700Huawei Technologies Co., Ltd.	S12700 V200R005C00Affected V200R006C00Affected V200R007C00Affected V200R007C01Affected V200R007C20Affected V200R008C00Affected V200R009C00Affected S1700 V200R006C10Affected S2700 V100R006C03Affected V200R003C00Affected V200R005C00Affected V200R006C10Affected V200R007C00B050Affected V200R007C00SPC009TAffected V200R007C00SPC019TAffected S3700 V100R006C03Affected S5700 V200R001C00Affected V200R001C01Affected V200R002C00Affected V200R003C02Affected V200R005C01Affected V200R005C02Affected V200R005C03Affected S6700 V200R001C00Affected S7700 V200R001C00Affected and 3 more versions

Product

Versions

S12700; S1700; S2700; S3700; S5700; S6700; S7700; S9700Huawei Technologies Co., Ltd.

S12700 V200R005C00Affected
V200R006C00Affected
V200R007C00Affected
V200R007C01Affected
V200R007C20Affected
V200R008C00Affected
V200R009C00Affected
S1700 V200R006C10Affected
S2700 V100R006C03Affected
V200R003C00Affected
V200R005C00Affected
V200R006C10Affected
V200R007C00B050Affected
V200R007C00SPC009TAffected
V200R007C00SPC019TAffected
S3700 V100R006C03Affected
S5700 V200R001C00Affected
V200R001C01Affected
V200R002C00Affected
V200R003C02Affected
V200R005C01Affected
V200R005C02Affected
V200R005C03Affected
S6700 V200R001C00Affected
S7700 V200R001C00Affected
and 3 more versions

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-mpls-en

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.