Lucene search

[email protected]CVE-2016-5368

HistoryJun 30, 2016 - 4:59 p.m.

CVE-2016-5368

2016-06-3016:59:09

CWE-399

[email protected]

web.nvd.nist.gov

cve-2016-5368

memory leak

huawei ar3200

denial of service

mpls packets

nvd

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.8%

JSON

Memory leak in Huawei AR3200 before V200R007C00SPC900 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted Multiprotocol Label Switching (MPLS) packets.

Affected configurations

NVD

Node

huaweiar3200Match-

AND

huaweiar3200_firmwareMatchv200r005c20

huaweiar3200_firmwareMatchv200r005c32

huaweiar3200_firmwareMatchv200r007c00

CPENameOperatorVersion
huawei:ar3200_firmwarehuawei ar3200 firmwareeqv200r005c20
huawei:ar3200_firmwarehuawei ar3200 firmwareeqv200r005c32
huawei:ar3200_firmwarehuawei ar3200 firmwareeqv200r007c00

CPE	Name	Operator	Version
huawei:ar3200_firmware	huawei ar3200 firmware	eq	v200r005c20
huawei:ar3200_firmware	huawei ar3200 firmware	eq	v200r005c32
huawei:ar3200_firmware	huawei ar3200 firmware	eq	v200r007c00

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20160608-01-mpls-en

www.securityfocus.com/bid/91557

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.8%

JSON

Related for CVE-2016-5368

cvelist1 prion1 nvd1