Security Advisory - Memory Leak Vulnerability in Huawei Switches
- SA No:Huawei-SA-20160113-03-Switch
- Initial Release Date: Jan 13, 2016
- Last Release Date: Jan 13, 2016
When serving as an HTTPS or SFTP server, the Huawei switch stores a user's SSL session information in the memory even after the user logs out. If the memory occupied by the SSL session information exceeds the allocated amount, memory leak occurs, causing the device to restart. (Vulnerability ID: HWPSIRT-2015-11035)
This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2015-8677.Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160113-03-switch-en
|
Product Name |
Affected Version |
Resolved Product and Version |
|
S5300EI/ S5300SI/ S5310HI/ S6300EI |
V200R003C00 |
V200R003SPH011 |
|
V200R005C00 |
V200R005SPH008 |
|
|
S2350EI/ S5300LI |
V200R003C00 |
V200R003SPH011 |
|
V200R005C00 |
V200R005SPH008 |
|
|
V200R006C00 |
V200R006SPH002 |
|
|
S9300/ S7700/ S9700 |
V200R003C00 |
V200R003SPH011 |
|
V200R005C00 |
V200R005SPH009 |
|
|
V200R006C00 |
V200R006SPH003 |
|
|
S5720HI/ S5720EI |
V200R006C00 |
V200R006SPH002 |
|
S2300/ S3300 |
V100R006C05 |
V100R006SPH022 |
An attacker can exploit this vulnerability to exhaust the allocated memory on the HTTPS or SFTP server, causing the device to restart.
The vulnerability classification has been performed by using the CVSSv2 scoring system (http://www.first.org/cvss/).
Base Score: 4.0 ( AV:N/AC:L/Au:S/C:N/I:N/A:P)
Temporal Score: 3.3 (E:F/RL:O/RC:C)1. Prerequisites:
The attacker can log in to the HTTPS or SFTP server.
2. Attacking procedure:
The attacker logs in to and out of the HTTPS or SFTP server multiple times. If the memory occupied by the SSL session information exceeds the allocated memory size, memory leak occurs, leading to the reboot of the device.
This vulnerability was reported by Huawei internal tester.
None
This document is provided on an "AS IS" basis and does not imply any kind of guarantee or warranty, either express or implied, including the warranties of merchantability or fitness for a particular purpose. In no event shall Huawei or any of its directly or indirectly controlled subsidiaries or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages. Your use of the document, by whatsoever means, will be totally at your own risk. Huawei is entitled to amend or update this document from time to time.
