PT-2021-22788
CVE-2021-40008
·
تاريخ النشر
2021-12-08
·
تاريخ التحديث
2021-12-15
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
CloudEngine 12800 version V200R019C00SPC800
CloudEngine 5800 version V200R019C00SPC800
CloudEngine 6800 version V200R019C00SPC800
CloudEngine 7800 version V200R019C00SPC800
Description
The software does not sufficiently track and release allocated memory while parsing a series of crafted binary messages, which could consume remaining memory. Successful exploit could cause memory exhaust.
Recommendations
For CloudEngine 12800 version V200R019C00SPC800, update to a version that includes the fix for the memory leak issue.
For CloudEngine 5800 version V200R019C00SPC800, update to a version that includes the fix for the memory leak issue.
For CloudEngine 6800 version V200R019C00SPC800, update to a version that includes the fix for the memory leak issue.
For CloudEngine 7800 version V200R019C00SPC800, update to a version that includes the fix for the memory leak issue.
As a temporary workaround, consider restricting the parsing of crafted binary messages to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾