Security Advisory - Memory Leak Vulnerability in Some Huawei Products

Some Huawei products have a memory leak vulnerability. An unauthenticated attacker may send specific Label Distribution Protocol (LDP) packets to the devices repeatly. Due to improper validation of some specific fields of the packet, the LDP processing module does not release the memory, resulting in memory leak. (Vulnerability ID: HWPSIRT-2016-08013)

This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2016-8782.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161214-01-ldp-en