Memory corruption

2018-02-1516:29:00

PRIOn knowledge base

www.prio-n.com

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Huawei Secospace USG6600 V500R001C30SPC100, Secospace USG6600 V500R001C30SPC200, Secospace USG6600 V500R001C30SPC300, USG9500 V500R001C30SPC100, USG9500 V500R001C30SPC200, USG9500 V500R001C30SPC300 have a memory leak vulnerability due to memory don’t be released when an local authenticated attacker execute special commands many times. An attacker could exploit it to cause memory leak, which may further lead to system exceptions.

CPENameOperatorVersion
secospace_usg6600_firmwareeq500r1c30spc100-v
secospace_usg6600_firmwareeq500r1c30spc200-v
secospace_usg6600_firmwareeq500r1c30spc300-v
usg9500_firmwareeq500r1c30spc100-v
usg9500_firmwareeq500r1c30spc200-v
usg9500_firmwareeq500r1c30spc300-v

Name	Operator	Version
secospace_usg6600_firmware	eq	500r1c30spc100-v
secospace_usg6600_firmware	eq	500r1c30spc200-v
secospace_usg6600_firmware	eq	500r1c30spc300-v
usg9500_firmware	eq	500r1c30spc100-v
usg9500_firmware	eq	500r1c30spc200-v
usg9500_firmware	eq	500r1c30spc300-v