CVE-2017-17330

Description

Huawei AR3200 V200R005C32; V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20; V200R008C30; NGFW Module V500R001C00; V500R001C20; V500R002C00 have a memory leak vulnerability. The software does not release allocated memory properly when parse XML element data. An authenticated attacker could upload a crafted XML file, successful exploit could cause the system service abnormal since run out of memory.

Risk Information

Base Score

3.3

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

EPSS Score

Exploitation Probability

0.026

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2016-3950 ,CVE-2016-5368 ,CVE-2016-6206 ,CVE-2016-8797 ,CVE-2017-17330 are affected in ar3200_firmware v200r005c32	NCM
Vulnerabilities CVE-2016-5368 ,CVE-2016-8797 ,CVE-2017-17330 are affected in ar3200_firmware v200r007c00	NCM
Vulnerabilities CVE-2016-6206 ,CVE-2017-15343 ,CVE-2017-15344 ,CVE-2017-17330 are affected in ar3200_firmware v200r006c11	NCM
Vulnerabilities CVE-2016-6206 ,CVE-2017-17330 are affected in ar3200_firmware v200r006c10	NCM
Vulnerabilities CVE-2017-15341 ,CVE-2017-17330 are affected in ar3200_firmware v200r008c30	NCM
Vulnerabilities CVE-2017-15341 ,CVE-2017-17330 are affected in ar3200_firmware v200r008c20	NCM
Vulnerabilities CVE-2017-15343 ,CVE-2017-15344 ,CVE-2017-17330 are affected in ar3200_firmware v200r008c10	NCM
Vulnerabilities CVE-2017-15343 ,CVE-2017-15344 ,CVE-2017-17330 are affected in ar3200_firmware v200r008c00	NCM
Vulnerabilities CVE-2017-17330 are affected in ar3200_firmware v200r007c02	NCM
Vulnerabilities CVE-2017-17330 are affected in ar3200_firmware v200r007c01	NCM
Missing Release of Resource after Effective Lifetime Vulnerability (CVE-2017-17330)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234