CVE-2021-40008

Name of the Vulnerable Software and Affected Versions CloudEngine 12800 version V200R019C00SPC800 CloudEngine 5800 version V200R019C00SPC800 CloudEngine 6800 version V200R019C00SPC800 CloudEngine 7800 version V200R019C00SPC800

Description The software does not sufficiently track and release allocated memory while parsing a series of crafted binary messages, which could consume remaining memory. Successful exploit could cause memory exhaust.

Recommendations For CloudEngine 12800 version V200R019C00SPC800, update to a version that includes the fix for the memory leak issue. For CloudEngine 5800 version V200R019C00SPC800, update to a version that includes the fix for the memory leak issue. For CloudEngine 6800 version V200R019C00SPC800, update to a version that includes the fix for the memory leak issue. For CloudEngine 7800 version V200R019C00SPC800, update to a version that includes the fix for the memory leak issue. As a temporary workaround, consider restricting the parsing of crafted binary messages to minimize the risk of exploitation.