Double free

2020-03-2015:15:00

PRIOn knowledge base

www.prio-n.com

4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

There is a double free vulnerability in some Huawei products. A local attacker with low privilege may perform some operations to exploit the vulnerability. Due to doubly freeing memory, successful exploit may cause some service abnormal. Affected product versions include:CampusInsight versions V100R019C00;ManageOne versions 6.5.RC2.B050.

CPENameOperatorVersion
campusinsighteq100r19c0-v
manageoneeq6.5 rc2.b50

CPE	Name	Operator	Version
	campusinsight	eq	100r19c0-v
	manageone	eq	6.5 rc2.b50

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-01-free-en