Medium severity · published Feb 15, 2018
CVE-2017-17164
Huawei Secospace AntiDDoS8000 V500R001C20SPC500 have a memory leak vulnerability due to memory don't be released when the system open some function
5.3
CVSS
0.9%
EPSS
No
On KEV
Description
Huawei Secospace AntiDDoS8000 V500R001C20SPC500 have a memory leak vulnerability due to memory don't be released when the system open some function. An attacker could exploit it to cause memory leak, which may further lead to system exceptions.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 59% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Secospace Antiddos8000 Firmware · Huawei
v500r001c20spc500 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-17164
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-17164
Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-01-antidos-en
More from Secospace Antiddos8000 Firmware
9.8
CVE-2016-4576
Buffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the Huawei IPS Module, NGFW Module, NIP6300, NIP6600, Secospace USG6300, USG6500, USG6600,…
8.6
CVE-2019-5254
Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace…
8.1
CVE-2020-1864
Some Huawei products have a security vulnerability due to improper authentication
7.5
CVE-2019-5304
Some Huawei products have a buffer error vulnerability
5.5
CVE-2019-5258
Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace…