CVE-2019-5275

USG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability. Due to a flaw in the X.509 implementation in the affected products which can result in a heap buffer overflow when decoding a certificate, an attacker may exploit the vulnerability by a malicious certificate to perform a denial of service attack on the affected products.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:*:*:*:*:*:*:*
cpe:2.3:o:huawei:usg9500_firmware:v500r001c60:*:*:*:*:*:*:*
cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2019-12-26 19:15

Updated : 2024-02-28 17:28


NVD link : CVE-2019-5275

Mitre link : CVE-2019-5275

CVE.ORG link : CVE-2019-5275


JSON object : View

Products Affected

huawei

  • usg9500_firmware
  • usg9500
CWE
CWE-787

Out-of-bounds Write