There is a memory leak vulnerability in some versions of Huawei CloudEngine product. An unauthenticated, remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory properly, successful exploit may cause memory leak.
References
Link | Resource |
---|---|
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201223-01-cloudengine-en | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
Configuration 4 (hide)
AND |
|
Information
Published : 2020-12-29 10:15
Updated : 2021-07-21 04:39
NVD link : CVE-2020-9124
Mitre link : CVE-2020-9124
JSON object : View
CWE
CWE-401
Missing Release of Memory after Effective Lifetime
Products Affected
huawei
- cloudengine_12800_firmware
- cloudengine_7800
- cloudengine_5800_firmware
- cloudengine_6800_firmware
- cloudengine_12800
- cloudengine_6800
- cloudengine_7800_firmware
- cloudengine_5800