477 lines
26 KiB
JSON
477 lines
26 KiB
JSON
{
|
|
"containers": {
|
|
"cna": {
|
|
"affected": [
|
|
{
|
|
"product": "DP300; IPS Module; NGFW Module; NIP6300; NIP6600; RP200; S12700; S1700; S2700; S5700; S6700; S7700; S9700; Secospace USG6300; Secospace USG6500; Secospace USG6600; TE30; TE40; TE50; TE60; TP3106; TP3206; USG9500; ViewPoint 9030",
|
|
"vendor": "Huawei Technologies Co., Ltd.",
|
|
"versions": [
|
|
{
|
|
"status": "affected",
|
|
"version": "DP300 V500R002C00"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "IPS Module V500R001C00"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "V500R001C30"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "NGFW Module V500R001C00"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "V500R002C00"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "NIP6300 V500R001C00"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "NIP6600 V500R001C00"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "RP200 V500R002C00"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "V600R006C00"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "S12700 V200R007C00"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "V200R007C01"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "V200R008C00"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "V200R009C00"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "V200R010C00"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "S1700 V200R006C10"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "S2700 V200R006C10"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "V200R007C00"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "S5700 V200R006C00"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "S6700 V200R008C00"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "S7700 V200R007C00"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "S9700 V200R007C00"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "Secospace USG6300 V500R001C00"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "Secospace USG6500 V500R001C00"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "Secospace USG6600 V500R001C00"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "V500R001C30S"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "TE30 V100R001C02"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "V100R001C10"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "TE40 V500R002C00"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "TE50 V500R002C00"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "TE60 V100R001C01"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "TP3106 V100R002C00"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "TP3206 V100R002C00"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "V100R002C10"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "USG9500 V500R001C00"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "ViewPoint 9030 V100R011C02"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "V100R011C03"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"datePublic": "2017-12-06T00:00:00.000Z",
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S12700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; S1700 V200R006C10; V200R009C00; V200R010C00; S2700 V200R006C10; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S5700 V200R006C00; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S6700 V200R008C00; V200R009C00; V200R010C00; S7700 V200R007C00; V200R008C00; V200R009C00; V200R010C00; S9700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; Secospace USG6300 V500R001C00; V500R001C30; Secospace USG6500 V500R001C00; V500R001C30; Secospace USG6600 V500R001C00; V500R001C30S; TE30 V100R001C02; V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C01; V100R001C10; V500R002C00; V600R006C00; TP3106 V100R002C00; TP3206 V100R002C00; V100R002C10; USG9500 V500R001C00; V500R001C30; ViewPoint 9030 V100R011C02; V100R011C03 has a heap overflow vulnerability due to insufficient verification. An authenticated local attacker can make processing crash by a malicious certificate. The attacker can exploit this vulnerability to cause a denial of service."
|
|
}
|
|
],
|
|
"problemTypes": [
|
|
{
|
|
"descriptions": [
|
|
{
|
|
"description": "heap overflow",
|
|
"lang": "en",
|
|
"type": "text"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"providerMetadata": {
|
|
"dateUpdated": "2018-03-05T18:57:02.000Z",
|
|
"orgId": "25ac1063-e409-4190-8079-24548c77ea2e",
|
|
"shortName": "huawei"
|
|
},
|
|
"references": [
|
|
{
|
|
"tags": [
|
|
"x_refsource_CONFIRM"
|
|
],
|
|
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-pem-en"
|
|
}
|
|
],
|
|
"x_legacyV4Record": {
|
|
"CVE_data_meta": {
|
|
"ASSIGNER": "psirt@huawei.com",
|
|
"DATE_PUBLIC": "2017-12-06T00:00:00",
|
|
"ID": "CVE-2017-17136",
|
|
"STATE": "PUBLIC"
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "DP300; IPS Module; NGFW Module; NIP6300; NIP6600; RP200; S12700; S1700; S2700; S5700; S6700; S7700; S9700; Secospace USG6300; Secospace USG6500; Secospace USG6600; TE30; TE40; TE50; TE60; TP3106; TP3206; USG9500; ViewPoint 9030",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_value": "DP300 V500R002C00"
|
|
},
|
|
{
|
|
"version_value": "IPS Module V500R001C00"
|
|
},
|
|
{
|
|
"version_value": "V500R001C30"
|
|
},
|
|
{
|
|
"version_value": "NGFW Module V500R001C00"
|
|
},
|
|
{
|
|
"version_value": "V500R002C00"
|
|
},
|
|
{
|
|
"version_value": "NIP6300 V500R001C00"
|
|
},
|
|
{
|
|
"version_value": "V500R001C30"
|
|
},
|
|
{
|
|
"version_value": "NIP6600 V500R001C00"
|
|
},
|
|
{
|
|
"version_value": "V500R001C30"
|
|
},
|
|
{
|
|
"version_value": "RP200 V500R002C00"
|
|
},
|
|
{
|
|
"version_value": "V600R006C00"
|
|
},
|
|
{
|
|
"version_value": "S12700 V200R007C00"
|
|
},
|
|
{
|
|
"version_value": "V200R007C01"
|
|
},
|
|
{
|
|
"version_value": "V200R008C00"
|
|
},
|
|
{
|
|
"version_value": "V200R009C00"
|
|
},
|
|
{
|
|
"version_value": "V200R010C00"
|
|
},
|
|
{
|
|
"version_value": "S1700 V200R006C10"
|
|
},
|
|
{
|
|
"version_value": "V200R009C00"
|
|
},
|
|
{
|
|
"version_value": "V200R010C00"
|
|
},
|
|
{
|
|
"version_value": "S2700 V200R006C10"
|
|
},
|
|
{
|
|
"version_value": "V200R007C00"
|
|
},
|
|
{
|
|
"version_value": "V200R008C00"
|
|
},
|
|
{
|
|
"version_value": "V200R009C00"
|
|
},
|
|
{
|
|
"version_value": "V200R010C00"
|
|
},
|
|
{
|
|
"version_value": "S5700 V200R006C00"
|
|
},
|
|
{
|
|
"version_value": "V200R007C00"
|
|
},
|
|
{
|
|
"version_value": "V200R008C00"
|
|
},
|
|
{
|
|
"version_value": "V200R009C00"
|
|
},
|
|
{
|
|
"version_value": "V200R010C00"
|
|
},
|
|
{
|
|
"version_value": "S6700 V200R008C00"
|
|
},
|
|
{
|
|
"version_value": "V200R009C00"
|
|
},
|
|
{
|
|
"version_value": "V200R010C00"
|
|
},
|
|
{
|
|
"version_value": "S7700 V200R007C00"
|
|
},
|
|
{
|
|
"version_value": "V200R008C00"
|
|
},
|
|
{
|
|
"version_value": "V200R009C00"
|
|
},
|
|
{
|
|
"version_value": "V200R010C00"
|
|
},
|
|
{
|
|
"version_value": "S9700 V200R007C00"
|
|
},
|
|
{
|
|
"version_value": "V200R007C01"
|
|
},
|
|
{
|
|
"version_value": "V200R008C00"
|
|
},
|
|
{
|
|
"version_value": "V200R009C00"
|
|
},
|
|
{
|
|
"version_value": "V200R010C00"
|
|
},
|
|
{
|
|
"version_value": "Secospace USG6300 V500R001C00"
|
|
},
|
|
{
|
|
"version_value": "V500R001C30"
|
|
},
|
|
{
|
|
"version_value": "Secospace USG6500 V500R001C00"
|
|
},
|
|
{
|
|
"version_value": "V500R001C30"
|
|
},
|
|
{
|
|
"version_value": "Secospace USG6600 V500R001C00"
|
|
},
|
|
{
|
|
"version_value": "V500R001C30S"
|
|
},
|
|
{
|
|
"version_value": "TE30 V100R001C02"
|
|
},
|
|
{
|
|
"version_value": "V100R001C10"
|
|
},
|
|
{
|
|
"version_value": "V500R002C00"
|
|
},
|
|
{
|
|
"version_value": "V600R006C00"
|
|
},
|
|
{
|
|
"version_value": "TE40 V500R002C00"
|
|
},
|
|
{
|
|
"version_value": "V600R006C00"
|
|
},
|
|
{
|
|
"version_value": "TE50 V500R002C00"
|
|
},
|
|
{
|
|
"version_value": "V600R006C00"
|
|
},
|
|
{
|
|
"version_value": "TE60 V100R001C01"
|
|
},
|
|
{
|
|
"version_value": "V100R001C10"
|
|
},
|
|
{
|
|
"version_value": "V500R002C00"
|
|
},
|
|
{
|
|
"version_value": "V600R006C00"
|
|
},
|
|
{
|
|
"version_value": "TP3106 V100R002C00"
|
|
},
|
|
{
|
|
"version_value": "TP3206 V100R002C00"
|
|
},
|
|
{
|
|
"version_value": "V100R002C10"
|
|
},
|
|
{
|
|
"version_value": "USG9500 V500R001C00"
|
|
},
|
|
{
|
|
"version_value": "V500R001C30"
|
|
},
|
|
{
|
|
"version_value": "ViewPoint 9030 V100R011C02"
|
|
},
|
|
{
|
|
"version_value": "V100R011C03"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"vendor_name": "Huawei Technologies Co., Ltd."
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"data_format": "MITRE",
|
|
"data_type": "CVE",
|
|
"data_version": "4.0",
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S12700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; S1700 V200R006C10; V200R009C00; V200R010C00; S2700 V200R006C10; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S5700 V200R006C00; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S6700 V200R008C00; V200R009C00; V200R010C00; S7700 V200R007C00; V200R008C00; V200R009C00; V200R010C00; S9700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; Secospace USG6300 V500R001C00; V500R001C30; Secospace USG6500 V500R001C00; V500R001C30; Secospace USG6600 V500R001C00; V500R001C30S; TE30 V100R001C02; V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C01; V100R001C10; V500R002C00; V600R006C00; TP3106 V100R002C00; TP3206 V100R002C00; V100R002C10; USG9500 V500R001C00; V500R001C30; ViewPoint 9030 V100R011C02; V100R011C03 has a heap overflow vulnerability due to insufficient verification. An authenticated local attacker can make processing crash by a malicious certificate. The attacker can exploit this vulnerability to cause a denial of service."
|
|
}
|
|
]
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "heap overflow"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"name": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-pem-en",
|
|
"refsource": "CONFIRM",
|
|
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-pem-en"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
},
|
|
"adp": [
|
|
{
|
|
"providerMetadata": {
|
|
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
|
|
"shortName": "CVE",
|
|
"dateUpdated": "2024-08-05T20:43:59.931Z"
|
|
},
|
|
"title": "CVE Program Container",
|
|
"references": [
|
|
{
|
|
"tags": [
|
|
"x_refsource_CONFIRM",
|
|
"x_transferred"
|
|
],
|
|
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-pem-en"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"cveMetadata": {
|
|
"assignerOrgId": "25ac1063-e409-4190-8079-24548c77ea2e",
|
|
"assignerShortName": "huawei",
|
|
"cveId": "CVE-2017-17136",
|
|
"datePublished": "2018-03-05T19:00:00.000Z",
|
|
"dateReserved": "2017-12-04T00:00:00.000Z",
|
|
"dateUpdated": "2024-09-16T16:49:17.056Z",
|
|
"state": "PUBLISHED"
|
|
},
|
|
"dataType": "CVE_RECORD",
|
|
"dataVersion": "5.1"
|
|
} |