CVEvulnerability

CVE-2018-7994

7.5 HIGH Published 2018-07-31 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-07-31
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-772

Description

Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10; NIP6300 V500R001C50; NIP6600 V500R001C50; NIP6800 V500R001C50; Secospace USG6600 V500R001C50; USG9500 V500R001C50 have a memory leak vulnerability. The software does not release allocated memory properly when processing Protal questionnaire. A remote attacker could send a lot questionnaires to the device, successful exploit could cause the device to reboot since running out of memory.

Affected configurations

• huawei ips module v500r001c50 • huawei ngfw module v500r001c50 • huawei ngfw module v500r002c10 • huawei nip6300 v500r001c50 • huawei nip6600 v500r001c50 • huawei nip6800 v500r001c50 • huawei secospace usg6600 v500r001c50 • huawei usg9500 v500r001c50

Related

Weakness · CWE (1)

  • CWE-772 Missing Release of Resource after Effective Lifetime weakness

References