CVE-2017-17330
First published: Fri Mar 09 2018(Updated: )
Huawei AR3200 V200R005C32; V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20; V200R008C30; NGFW Module V500R001C00; V500R001C20; V500R002C00 have a memory leak vulnerability. The software does not release allocated memory properly when parse XML element data. An authenticated attacker could upload a crafted XML file, successful exploit could cause the system service abnormal since run out of memory.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei Ar3200 Firmware | =v200r005c32 | |
| Huawei Ar3200 Firmware | =v200r006c10 | |
| Huawei Ar3200 Firmware | =v200r006c11 | |
| Huawei Ar3200 Firmware | =v200r007c00 | |
| Huawei Ar3200 Firmware | =v200r007c01 | |
| Huawei Ar3200 Firmware | =v200r007c02 | |
| Huawei Ar3200 Firmware | =v200r008c00 | |
| Huawei Ar3200 Firmware | =v200r008c10 | |
| Huawei Ar3200 Firmware | =v200r008c20 | |
| Huawei Ar3200 Firmware | =v200r008c30 | |
| Huawei AR3200 | ||
| Huawei Ngfw Module Firmware | =v500r001c00 | |
| Huawei Ngfw Module Firmware | =v500r001c20 | |
| Huawei Ngfw Module Firmware | =v500r002c00 | |
| Huawei NGFW Module |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2017-17330.
What software versions are affected?
The affected software versions are Huawei AR3200 V200R005C32, V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, NGFW Module V500R001C00, V500R001C20, V500R002C00.
What is the severity of CVE-2017-17330?
The severity of CVE-2017-17330 is low, with a severity value of 3.3.
What is the description of CVE-2017-17330?
CVE-2017-17330 is a memory leak vulnerability in Huawei AR3200 and NGFW Module firmware versions mentioned above. The software fails to release allocated memory properly when parsing XML.
How can I fix CVE-2017-17330?
To fix CVE-2017-17330, Huawei has provided a security advisory with mitigation measures. Please refer to the official Huawei website for more information.
- collector/nvd-index
- agent/severity
- agent/author
- agent/weakness
- agent/references
- agent/type
- agent/description
- agent/event
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- vendor/huawei
- canonical/huawei ar3200 firmware
- version/huawei ar3200 firmware/v200r005c32
- version/huawei ar3200 firmware/v200r006c10
- version/huawei ar3200 firmware/v200r006c11
- version/huawei ar3200 firmware/v200r007c00
- version/huawei ar3200 firmware/v200r007c01
- version/huawei ar3200 firmware/v200r007c02
- version/huawei ar3200 firmware/v200r008c00
- version/huawei ar3200 firmware/v200r008c10
- version/huawei ar3200 firmware/v200r008c20
- version/huawei ar3200 firmware/v200r008c30
- canonical/huawei ar3200
- canonical/huawei ngfw module firmware
- version/huawei ngfw module firmware/v500r001c00
- version/huawei ngfw module firmware/v500r001c20
- version/huawei ngfw module firmware/v500r002c00
- canonical/huawei ngfw module