Riskcovery

CVE-2017-17330

State
Published
Severity
Not scored
Published
Mar 9, 2018
Updated
Aug 5, 2024
Reserved
Dec 4, 2017

Read the record on cve.org

Description

Huawei AR3200 V200R005C32; V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20; V200R008C30; NGFW Module V500R001C00; V500R001C20; V500R002C00 have a memory leak vulnerability. The software does not release allocated memory properly when parse XML element data. An authenticated attacker could upload a crafted XML file, successful exploit could cause the system service abnormal since run out of memory.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
AR3200; NGFW ModuleHuawei Technologies Co., Ltd.
  • AR3200 V200R005C32Affected
  • V200R006C10Affected
  • V200R006C11Affected
  • V200R007C00Affected
  • V200R007C01Affected
  • V200R007C02Affected
  • V200R008C00Affected
  • V200R008C10Affected
  • V200R008C20Affected
  • V200R008C30Affected
  • NGFW Module V500R001C00Affected
  • V500R001C20Affected
  • V500R002C00Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.