CVE-2017-17141
Last modified
CVE-2017-17141 is a vulnerability of currently unknown severity. Huawei S12700 V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R007C20; V200R008C00; V200R009C00;S1700 V200R006C10; V200R009C00;S2700 V100R006C03; V200R003C00; V200R005C00; V200R006C00; V200R006C10; V200R007C00; V200R007C00B050; V200R007C00SPC009T; V200R007C00SPC019T; V200R008C00; V200R009C00;S3700 V100R006C03;S5700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R003C02; V200R005C00; V200R005C01; V200R005C02; V200R005C03; V200R006C00; V200R007C00; V200R008C00; V200R009C00;S6700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R005C01; V200R005C02; V200R008C00; V200R009C00;S7700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R006C00; V200R006C01; V200R007C00; V200R007C01; V200R008C00; V200R008C06; V200R009C00;S9700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R008C00; V200R009C00 have a memory leak vulnerability. In some specific conditions, if attackers send specific malformed MPLS Service PING messages to the affected products, products do not release the memory when handling the packets. EPSS estimates a 0.72% chance of exploitation in the next 30 days.
Description
Huawei S12700 V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R007C20; V200R008C00; V200R009C00;S1700 V200R006C10; V200R009C00;S2700 V100R006C03; V200R003C00; V200R005C00; V200R006C00; V200R006C10; V200R007C00; V200R007C00B050; V200R007C00SPC009T; V200R007C00SPC019T; V200R008C00; V200R009C00;S3700 V100R006C03;S5700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R003C02; V200R005C00; V200R005C01; V200R005C02; V200R005C03; V200R006C00; V200R007C00; V200R008C00; V200R009C00;S6700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R005C01; V200R005C02; V200R008C00; V200R009C00;S7700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R006C00; V200R006C01; V200R007C00; V200R007C01; V200R008C00; V200R008C06; V200R009C00;S9700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R008C00; V200R009C00 have a memory leak vulnerability. In some specific conditions, if attackers send specific malformed MPLS Service PING messages to the affected products, products do not release the memory when handling the packets. So successful exploit will result in memory leak of the affected products.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Huawei | S12700 Firmware | v200r005c00 |
| Huawei | S12700 Firmware | v200r006c00 |
| Huawei | S12700 Firmware | v200r007c00 |
| Huawei | S12700 Firmware | v200r007c01 |
| Huawei | S12700 Firmware | v200r007c20 |
| Huawei | S12700 Firmware | v200r008c00 |
| Huawei | S12700 Firmware | v200r009c00 |
| Huawei | S1700 Firmware | v200r006c10 |
| Huawei | S1700 Firmware | v200r009c00 |
| Huawei | S2700 Firmware | v100r006c03 |
| Huawei | S2700 Firmware | v200r003c00 |
| Huawei | S2700 Firmware | v200r005c00 |
| Huawei | S2700 Firmware | v200r006c00 |
| Huawei | S2700 Firmware | v200r006c10 |
| Huawei | S2700 Firmware | v200r007c00 |
| Huawei | S2700 Firmware | v200r007c00b050 |
| Huawei | S2700 Firmware | v200r007c00spc009t |
| Huawei | S2700 Firmware | v200r007c00spc019t |
| Huawei | S2700 Firmware | v200r008c00 |
| Huawei | S2700 Firmware | v200r009c00 |
| Huawei | S3700 Firmware | v100r006c03 |
| Huawei | S5700 Firmware | v200r001c00 |
| Huawei | S5700 Firmware | v200r001c01 |
| Huawei | S5700 Firmware | v200r002c00 |
| Huawei | S5700 Firmware | v200r003c00 |
| Huawei | S5700 Firmware | v200r003c02 |
| Huawei | S5700 Firmware | v200r005c00 |
| Huawei | S5700 Firmware | v200r005c01 |
| Huawei | S5700 Firmware | v200r005c02 |
| Huawei | S5700 Firmware | v200r005c03 |
| Huawei | S5700 Firmware | v200r006c00 |
| Huawei | S5700 Firmware | v200r007c00 |
| Huawei | S5700 Firmware | v200r008c00 |
| Huawei | S5700 Firmware | v200r009c00 |
| Huawei | S6700 Firmware | v200r001c00 |
| Huawei | S6700 Firmware | v200r001c01 |
| Huawei | S6700 Firmware | v200r002c00 |
| Huawei | S6700 Firmware | v200r003c00 |
| Huawei | S6700 Firmware | v200r005c00 |
| Huawei | S6700 Firmware | v200r005c01 |
| Huawei | S6700 Firmware | v200r005c02 |
| Huawei | S6700 Firmware | v200r008c00 |
| Huawei | S6700 Firmware | v200r009c00 |
| Huawei | S7700 Firmware | v200r001c00 |
| Huawei | S7700 Firmware | v200r001c01 |
| Huawei | S7700 Firmware | v200r002c00 |
| Huawei | S7700 Firmware | v200r003c00 |
| Huawei | S7700 Firmware | v200r005c00 |
| Huawei | S7700 Firmware | v200r006c00 |
| Huawei | S7700 Firmware | v200r006c01 |
Showing 50 of 65 affected configurations. See NVD for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-17141?
How severe is CVE-2017-17141?
How do I fix CVE-2017-17141?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-17136PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C…
- CVE-2017-17137PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C…
- CVE-2017-17138PEM module of DP300 V500R002C00; IPS Module V500R001C00; V50…
- CVE-2017-17139Huawei Mate 9 and Mate 9 pro smart phones with software the …
- CVE-2017-1714IBM Notes and Domino NSD 8.5 and 9.0 could allow an authenti…
- CVE-2017-17140Huawei Enjoy 5s and Y6 Pro smartphones with software the ver…
- CVE-2017-17142SIP module in Huawei DP300 V500R002C00; V500R002C00SPC100; V…
- CVE-2017-17143SIP module in Huawei DP300 V500R002C00; V500R002C00SPC100; V…
- CVE-2017-17144Backup feature of SIP module in Huawei DP300 V500R002C00; V5…
- CVE-2017-17145Huawei Honor V9 Play smart phones with the versions before J…
- CVE-2017-17146Huawei DP300 V500R002C00 have a buffer overflow vulnerabilit…
- CVE-2017-17147Huawei DP300 V500R002C00 have an integer overflow vulnerabil…
Are you affected by CVE-2017-17141?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
