PT-2018-5786
CVE-2017-15314
·
Publicado
2018-03-09
·
Atualizado
2019-10-03
Descrição por
CVSS 3.1
5.5
MédiaMétricasAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
Huawei DP300 versions V500R002C00
Huawei RP200 versions V500R002C00SPC200, V600R006C00
Huawei TE30 versions V100R001C10SPC300, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700, V500R002C00SPC200, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00
Huawei TE40 versions V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00
Huawei TE50 versions V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPCb00, V600R006C00
Huawei TE60 versions V100R001C10, V500R002C00, V600R006C00
Description:
The issue is caused by a memory leak when the XML parser processes some nodes that fail, resulting in memory not being released. An attacker could exploit this to cause a memory leak, potentially leading to system exceptions.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾