What is CVE-2017-17141?

CVE-2017-17141 is a low-severity vulnerability in Huawei S12700, classified under Missing Release of Resource after Effective Lifetime. CVSS score: 3.7/10. Published 2018-03-05.

How severe is CVE-2017-17141?

Low severity. CVSS v3 base score is 3.7 out of 10.

Vulnerability in Huawei S12700

CVE-2017-17141

Huawei S12700 V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R007C20; V200R008C00; V200R009C00;S1700 V200R006C10; V200R009C00;S2700 V100R006C03; V200R003C00; V200R005C00; V200R006C00; V200R006C10; V200R007C00; V200R007C00B050; V200R007C00SPC009T; V200R007C00SPC019T; V200R008C00; V200R009C00;S3700 V100R006C03;S5700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R003C02; V200R005C00; V200R005C01; V200R005C02; V200R005C03; V200R006C00; V200R007C00; V200R008C00; V200R009C00;S6700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R005C01; V200R005C02; V200R008C00; V200R009C00;S7700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R006C00; V200R006C01; V200R007C00; V200R007C01; V200R008C00; V200R008C06; V200R009C00;S9700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R008C00; V200R009C00 have a memory leak vulnerability. In some specific conditions, if attackers send specific malformed MPLS Service PING messages to the affected products, products do not release the memory when handling the packets. So successful exploit will result in memory leak of the affected products.

EPSS: 0.007 (51.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.7 (Low). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L.

Affected products

Huawei S12700
Huawei S12700_firmware — versions v200r005c00, v200r006c00, v200r007c00
Huawei S1700
Huawei S1700_firmware — versions v200r006c10, v200r009c00
Huawei S2700
Huawei S2700_firmware — versions v100r006c03, v200r003c00, v200r005c00
Huawei S3700
Huawei S3700_firmware — versions v100r006c03
Huawei S5700
Huawei S5700_firmware — versions v200r001c00, v200r001c01, v200r002c00

Weakness classification (CWE)

CWE-772 — Missing Release of Resource after Effective Lifetime

References

psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-17141?: CVE-2017-17141 is a low-severity vulnerability in Huawei S12700, classified under Missing Release of Resource after Effective Lifetime. CVSS score: 3.7/10. Published 2018-03-05.
How severe is CVE-2017-17141?: Low severity. CVSS v3 base score is 3.7 out of 10.