What is CVE-2016-6177?

CVE-2016-6177 is a medium-severity vulnerability in Huawei Oceanstor 5800 V3, classified under Integer Overflow or Wraparound. CVSS score: 6.5/10. Published 2017-04-02.

How severe is CVE-2016-6177?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Integer overflow in Huawei Oceanstor 5800 V3

CVE-2016-6177

The Huawei OceanStor 5800 V300R003C00 has an integer overflow vulnerability. An authenticated attacker may send massive abnormal Network File System (NFS) packets, causing an anomaly in specific disk arrays.

Vulnerability class: Integer Overflow

EPSS: 0.006 (46.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Huawei Oceanstor_5800_v3
Huawei Oceanstor_5800_v3_firmware — versions v300r003c00
N/a Oceanstor 5800 V3 V300r003c00 — versions OceanStor 5800 V3 V300R003C00

Weakness classification (CWE)

CWE-190 — Integer Overflow or Wraparound

References

psirt@huawei.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2016-6177?: CVE-2016-6177 is a medium-severity vulnerability in Huawei Oceanstor 5800 V3, classified under Integer Overflow or Wraparound. CVSS score: 6.5/10. Published 2017-04-02.
How severe is CVE-2016-6177?: Medium severity. CVSS v3 base score is 6.5 out of 10.