There is a memory leak vulnerability in CloudEngine 12800 V200R019C00SPC800, CloudEngine 5800 V200R019C00SPC800, CloudEngine 6800 V200R019C00SPC800 and CloudEngine 7800 V200R019C00SPC800. The software does not sufficiently track and release allocated memory while parse a series of crafted binary messages, which could consume remaining memory. Successful exploit could cause memory exhaust.
References
| Link | Resource |
|---|---|
| https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20211208-01-memleak-en | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
History
15 Dec 2021, 13:28
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 7.5 |
| CWE | CWE-772 | |
| References | (MISC) https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20211208-01-memleak-en - Vendor Advisory | |
| CPE | cpe:2.3:h:huawei:cloudengine_5800:-:*:*:*:*:*:*:* cpe:2.3:o:huawei:cloudengine_5800_firmware:v200r019c00spc800:*:*:*:*:*:*:* cpe:2.3:h:huawei:cloudengine_6800:-:*:*:*:*:*:*:* cpe:2.3:h:huawei:cloudengine_7800:-:*:*:*:*:*:*:* cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r019c00spc800:*:*:*:*:*:*:* cpe:2.3:h:huawei:cloudengine_12800:-:*:*:*:*:*:*:* cpe:2.3:o:huawei:cloudengine_7800_firmware:v200r019c00spc800:*:*:*:*:*:*:* cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r019c00spc800:*:*:*:*:*:*:* |
13 Dec 2021, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-12-13 16:15
Updated : 2023-12-10 14:09
NVD link : CVE-2021-40008
Mitre link : CVE-2021-40008
CVE.ORG link : CVE-2021-40008
JSON object : View
Products Affected
huawei
- cloudengine_7800_firmware
- cloudengine_7800
- cloudengine_12800_firmware
- cloudengine_5800
- cloudengine_12800
- cloudengine_5800_firmware
- cloudengine_6800_firmware
- cloudengine_6800
CWE
CWE-772
Missing Release of Resource after Effective Lifetime