CVE-2015-8677

Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200R005C00 before V200R005SPH008; S2350EI and S5300LI Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH008, and V200R006C00 before V200R006SPH002; S9300, S7700, and S9700 Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH009, and V200R006C00 before V200R006SPH003; S5720HI and S5720EI Campus series switches with software V200R006C00 before V200R006SPH002; and S2300 and S3300 Campus series switches with software V100R006C05 before V100R006SPH022 allows remote authenticated users to cause a denial of service (memory consumption and device restart) by logging in and out of the (1) HTTPS or (2) SFTP server, related to SSL session information.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:huawei:s5300ei_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:huawei:s5300ei_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:s5300ei:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:o:huawei:s5300si_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:huawei:s5300si_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:s5300si:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
OR cpe:2.3:o:huawei:s5310hi_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:huawei:s5310hi_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:s5310hi:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
OR cpe:2.3:o:huawei:s6300ei_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:huawei:s6300ei_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:s6300ei:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
OR cpe:2.3:o:huawei:s5300li_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:huawei:s5300li_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:huawei:s5300li_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:s5300li:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
OR cpe:2.3:o:huawei:s2350ei_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:huawei:s2350ei_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:huawei:s2350ei_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:s2350ei:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
OR cpe:2.3:o:huawei:s9300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:huawei:s9300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:huawei:s9300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:s9300:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
OR cpe:2.3:o:huawei:s9700_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:huawei:s9700_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:huawei:s9700_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:s9700:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
OR cpe:2.3:o:huawei:s7700_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:huawei:s7700_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:huawei:s7700_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:s7700:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:huawei:s5720hi_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:s5720hi:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:huawei:s5720ei_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:s5720ei:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:huawei:s2300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:s2300:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:huawei:s3300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:s3300:-:*:*:*:*:*:*:*

History

21 Nov 2024, 02:38

Type Values Removed Values Added
References () http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160113-03-switch-en - Vendor Advisory () http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160113-03-switch-en - Vendor Advisory

Information

Published : 2016-04-14 15:59

Updated : 2024-11-21 02:38


NVD link : CVE-2015-8677

Mitre link : CVE-2015-8677

CVE.ORG link : CVE-2015-8677


JSON object : View

Products Affected

huawei

  • s7700_firmware
  • s5300si_firmware
  • s5310hi
  • s2350ei
  • s2300_firmware
  • s6300ei
  • s3300_firmware
  • s5300li_firmware
  • s5300ei_firmware
  • s5720ei
  • s5300si
  • s2350ei_firmware
  • s9300_firmware
  • s7700
  • s6300ei_firmware
  • s2300
  • s9700_firmware
  • s5300li
  • s5300ei
  • s5720hi
  • s5720hi_firmware
  • s5720ei_firmware
  • s5310hi_firmware
  • s3300
  • s9700
  • s9300
CWE
CWE-399

Resource Management Errors