CVE-2016-5435
First published: Fri Jun 24 2016(Updated: )
Memory leak in Huawei IPS Module, NGFW Module, NIP6300, NIP6600, and Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 V500R001C00 before V500R001C20SPC100, when in hot standby networking where two devices are not directly connected, allows remote attackers to cause a denial of service (memory consumption and reboot) via a crafted packet.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei Firmware | =v5500r001c00 | |
| Huawei IPS Module firmware | ||
| Huawei NGFW Module | ||
| Huawei NIP6300 firmware | ||
| Huawei NIP6600 firmware | ||
| Huawei Secospace AntiDDoS8000 | ||
| Huawei Secospace USG6300 firmware | ||
| Huawei Secospace USG6500 firmware | ||
| Huawei Secospace USG6600 firmware | ||
| Huawei Eudemon USG9500 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2016-5435?
CVE-2016-5435 is classified as a denial of service vulnerability.
How do I fix CVE-2016-5435?
To mitigate CVE-2016-5435, upgrade to the firmware version V500R001C20SPC100 or later.
Which devices are affected by CVE-2016-5435?
CVE-2016-5435 affects Huawei devices including the IPS Module, NGFW Module, and Secospace firewalls, among others.
What causes the CVE-2016-5435 vulnerability?
CVE-2016-5435 is caused by a memory leak in the hot standby networking configuration of the affected Huawei devices.
Can CVE-2016-5435 be exploited remotely?
Yes, CVE-2016-5435 can be exploited by remote attackers to cause a denial of service.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/references
- agent/weakness
- agent/author
- agent/severity
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/huawei
- canonical/huawei firmware
- version/huawei firmware/v5500r001c00
- canonical/huawei ips module firmware
- canonical/huawei ngfw module
- canonical/huawei nip6300 firmware
- canonical/huawei nip6600 firmware
- canonical/huawei secospace antiddos8000
- canonical/huawei secospace usg6300 firmware
- canonical/huawei secospace usg6500 firmware
- canonical/huawei secospace usg6600 firmware
- canonical/huawei eudemon usg9500