ID

VAR-201609-0096


CVE

CVE-2016-6518


TITLE

plural Huawei Service disruption on devices (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2016-005041

DESCRIPTION

Memory leak in Huawei S9300, S5300, S5700, S6700, S7700, S9700, and S12700 devices allows remote attackers to cause a denial of service (memory consumption and restart) via a large number of malformed packets. The Huawei S7700, S9300, S9700, and S12700 are Huawei's intelligent routing switches. A remote denial of service vulnerability exists in several HuaweiSwitches. The following products and versions are affected: Huawei S9300 V200R001C00 , V200R003C00 , V200R005C00 , V200R006C00 , V200R008C00 , S5300 V200R001C00 , V200R002C00 , V200R003C00 , V200R005C00 , V200R005C01 , V200R005C02 , V200R006C00 , V200R007C00 , V200R008C00 , S5700 V200R001C00 , V200R001C01 , V200R002C00 , V200R003C00 , V200R003C02 , V200R005C00 , V200R006C00 , V200R008C00 , S6300 V200R001C00 , V200R002C00 , V200R003C00 , V200R005C00 , V200R005C01 , V200R005C02 , V200R008C00 , S6700 V200R001C00 , V200R001C01 , V200R002C00 , V200R003C00 , V200R008C00 , S7700 V200R001C00 , V200R002C00 , V200R003C00 , V200R005C00 , V200R006C00 , V200R008C00 , S9700 V200R001C00 , V200R001C01 , V200R002C00 , V200R003C00, V200R005C00, V200R006C00, V200R008C00, S12700 V200R005C00, V200R006C00, V200R008C00

Trust: 2.52

sources: NVD: CVE-2016-6518 // JVNDB: JVNDB-2016-005041 // CNVD: CNVD-2016-08070 // BID: 92968 // VULHUB: VHN-95338

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2016-08070

AFFECTED PRODUCTS

vendor:huaweimodel:s9300scope:eqversion:v200r001c00

Trust: 2.4

vendor:huaweimodel:s9300scope:eqversion:v200r005c00

Trust: 2.4

vendor:huaweimodel:s9300scope:eqversion:v200r006c00

Trust: 2.4

vendor:huaweimodel:s9300scope:eqversion:v200r008c00

Trust: 2.4

vendor:huaweimodel:s9700scope:eqversion:v200r001c00

Trust: 2.4

vendor:huaweimodel:s9700scope:eqversion:v200r001c01

Trust: 2.4

vendor:huaweimodel:s9700scope:eqversion:v200r002c00

Trust: 2.4

vendor:huaweimodel:s9700scope:eqversion:v200r003c00

Trust: 2.4

vendor:huaweimodel:s9700scope:eqversion:v200r005c00

Trust: 2.4

vendor:huaweimodel:s9700scope:eqversion:v200r006c00

Trust: 2.4

vendor:huaweimodel:s12700scope:eqversion:v200r005c00

Trust: 1.8

vendor:huaweimodel:s12700scope:eqversion:v200r006c00

Trust: 1.8

vendor:huaweimodel:s12700scope:eqversion:v200r008c00

Trust: 1.8

vendor:huaweimodel:s5300scope:eqversion:v200r001c00

Trust: 1.8

vendor:huaweimodel:s5300scope:eqversion:v200r002c00

Trust: 1.8

vendor:huaweimodel:s5300scope:eqversion:v200r003c00

Trust: 1.8

vendor:huaweimodel:s5300scope:eqversion:v200r005c00

Trust: 1.8

vendor:huaweimodel:s5300scope:eqversion:v200r005c01

Trust: 1.8

vendor:huaweimodel:s5300scope:eqversion:v200r005c02

Trust: 1.8

vendor:huaweimodel:s5300scope:eqversion:v200r006c00

Trust: 1.8

vendor:huaweimodel:s5300scope:eqversion:v200r007c00

Trust: 1.8

vendor:huaweimodel:s5300scope:eqversion:v200r008c00

Trust: 1.8

vendor:huaweimodel:s5700scope:eqversion:v200r001c00

Trust: 1.8

vendor:huaweimodel:s5700scope:eqversion:v200r001c01

Trust: 1.8

vendor:huaweimodel:s5700scope:eqversion:v200r002c00

Trust: 1.8

vendor:huaweimodel:s5700scope:eqversion:v200r003c00

Trust: 1.8

vendor:huaweimodel:s5700scope:eqversion:v200r003c02

Trust: 1.8

vendor:huaweimodel:s5700scope:eqversion:v200r005c00

Trust: 1.8

vendor:huaweimodel:s5700scope:eqversion:v200r006c00

Trust: 1.8

vendor:huaweimodel:s5700scope:eqversion:v200r008c00

Trust: 1.8

vendor:huaweimodel:s6300scope:eqversion:v200r001c00

Trust: 1.8

vendor:huaweimodel:s6300scope:eqversion:v200r002c00

Trust: 1.8

vendor:huaweimodel:s6300scope:eqversion:v200r003c00

Trust: 1.8

vendor:huaweimodel:s6300scope:eqversion:v200r005c00

Trust: 1.8

vendor:huaweimodel:s6300scope:eqversion:v200r005c01

Trust: 1.8

vendor:huaweimodel:s6300scope:eqversion:v200r005c02

Trust: 1.8

vendor:huaweimodel:s6300scope:eqversion:v200r008c00

Trust: 1.8

vendor:huaweimodel:s6700scope:eqversion:v200r001c00

Trust: 1.8

vendor:huaweimodel:s6700scope:eqversion:v200r001c01

Trust: 1.8

vendor:huaweimodel:s6700scope:eqversion:v200r002c00

Trust: 1.8

vendor:huaweimodel:s6700scope:eqversion:v200r003c00

Trust: 1.8

vendor:huaweimodel:s6700scope:eqversion:v200r008c00

Trust: 1.8

vendor:huaweimodel:s7700scope:eqversion:v200r001c00

Trust: 1.8

vendor:huaweimodel:s7700scope:eqversion:v200r002c00

Trust: 1.8

vendor:huaweimodel:s7700scope:eqversion:v200r003c00

Trust: 1.8

vendor:huaweimodel:s7700scope:eqversion:v200r005c00

Trust: 1.8

vendor:huaweimodel:s7700scope:eqversion:v200r006c00

Trust: 1.8

vendor:huaweimodel:s7700scope:eqversion:v200r008c00

Trust: 1.8

vendor:huaweimodel:s9300scope:eqversion:v200r003c00

Trust: 1.8

vendor:huaweimodel:s9700scope:eqversion:v200r008c00

Trust: 1.8

vendor:huaweimodel:s5700 v200r001c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s7700 v200r003c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s7700 v200r005c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s9300 v200r003c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s9300 v200r005c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s9700 v200r003c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s9700 v200r005c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s12700 v200r005c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s7700 v200r001c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s7700 v200r002c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s7700 v200r006c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s9700 v200r001c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s9700 v200r001c01scope: - version: -

Trust: 0.9

vendor:huaweimodel:s9700 v200r002c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s9700 v200r006c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s9700 v200r008c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s12700 v200r006c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s12700 v200r008c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s6700 v200r001c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s6700 v200r001c01scope: - version: -

Trust: 0.9

vendor:huaweimodel:s6700 v200r002c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s6700 v200r003c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s6700 v200r008c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s6300 v200r001c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s6300 v200r002c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s6300 v200r003c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s6300 v200r005c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s6300 v200r005c01scope: - version: -

Trust: 0.9

vendor:huaweimodel:s6300 v200r005c02scope: - version: -

Trust: 0.9

vendor:huaweimodel:s6300 v200r008c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s5700 v200r001c01scope: - version: -

Trust: 0.9

vendor:huaweimodel:s5700 v200r002c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s5700 v200r003c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s5700 v200r003c02scope: - version: -

Trust: 0.9

vendor:huaweimodel:s5700 v200r005c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s5700 v200r006c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s5700 v200r008c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s5300 v200r003c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s5300 v200r005c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s5300 v200r005c01scope: - version: -

Trust: 0.9

vendor:huaweimodel:s5300 v200r005c02scope: - version: -

Trust: 0.9

vendor:huaweimodel:s5300 v200r006c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s5300 v200r008c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s9300 v200r001c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s9300 v200r006c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s9300 v200r008c00scope: - version: -

Trust: 0.9

vendor:huaweimodel:s12700scope: - version: -

Trust: 0.8

vendor:huaweimodel:s5300scope: - version: -

Trust: 0.8

vendor:huaweimodel:s5700scope: - version: -

Trust: 0.8

vendor:huaweimodel:s6300scope: - version: -

Trust: 0.8

vendor:huaweimodel:s6700scope: - version: -

Trust: 0.8

vendor:huaweimodel:s7700scope: - version: -

Trust: 0.8

vendor:huaweimodel:s9300scope: - version: -

Trust: 0.8

vendor:huaweimodel:s9700scope: - version: -

Trust: 0.8

vendor:huaweimodel:s7700 v200r008c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:s5300 v200r001c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:s5300 v200r002c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:s5300 v200r007c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:s9700 v200r008sph005scope:neversion: -

Trust: 0.3

vendor:huaweimodel:s9700 v200r008c00spc500scope:neversion: -

Trust: 0.3

vendor:huaweimodel:s9700 v200r003sph019scope:neversion: -

Trust: 0.3

vendor:huaweimodel:s9300 v200r008sph005scope:neversion: -

Trust: 0.3

vendor:huaweimodel:s9300 v200r008c00spc500scope:neversion: -

Trust: 0.3

vendor:huaweimodel:s9300 v200r003sph019scope:neversion: -

Trust: 0.3

vendor:huaweimodel:s7700 v200r008sph005scope:neversion: -

Trust: 0.3

vendor:huaweimodel:s7700 v200r008c00spc500scope:neversion: -

Trust: 0.3

vendor:huaweimodel:s7700 v200r003sph019scope:neversion: -

Trust: 0.3

vendor:huaweimodel:s6700 v200r008sph005scope:neversion: -

Trust: 0.3

vendor:huaweimodel:s6700 v200r005sph012scope:neversion: -

Trust: 0.3

vendor:huaweimodel:s6700 v200r005c00spc500scope:neversion: -

Trust: 0.3

vendor:huaweimodel:s6300 v200r008sph005scope:neversion: -

Trust: 0.3

vendor:huaweimodel:s6300 v200r005sph012scope:neversion: -

Trust: 0.3

vendor:huaweimodel:s6300 v200r005c00spc500scope:neversion: -

Trust: 0.3

vendor:huaweimodel:s5700 v200r008sph005scope:neversion: -

Trust: 0.3

vendor:huaweimodel:s5700 v200r008c00spc500scope:neversion: -

Trust: 0.3

vendor:huaweimodel:s5300li v200r003sph011scope:neversion: -

Trust: 0.3

vendor:huaweimodel:s5300 v200r008sph005scope:neversion: -

Trust: 0.3

vendor:huaweimodel:s5300 v200r008c00spc500scope:neversion: -

Trust: 0.3

vendor:huaweimodel:s5300 v200r003sph019scope:neversion: -

Trust: 0.3

vendor:huaweimodel:s12700 v200r008sph005scope:neversion: -

Trust: 0.3

vendor:huaweimodel:s12700 v200r008c00spc500scope:neversion: -

Trust: 0.3

vendor:huaweimodel:v200r008sph005scope:neversion:7700

Trust: 0.3

vendor:huaweimodel:v200r003sph019scope:neversion:7700

Trust: 0.3

sources: CNVD: CNVD-2016-08070 // BID: 92968 // JVNDB: JVNDB-2016-005041 // CNNVD: CNNVD-201609-365 // NVD: CVE-2016-6518

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2016-6518
value: HIGH

Trust: 1.0

NVD: CVE-2016-6518
value: HIGH

Trust: 0.8

CNVD: CNVD-2016-08070
value: LOW

Trust: 0.6

CNNVD: CNNVD-201609-365
value: MEDIUM

Trust: 0.6

VULHUB: VHN-95338
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2016-6518
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

CNVD: CNVD-2016-08070
severity: LOW
baseScore: 2.6
vectorString: AV:N/AC:H/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: HIGH
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 4.9
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

VULHUB: VHN-95338
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2016-6518
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 3.6
version: 3.0

Trust: 1.8

sources: CNVD: CNVD-2016-08070 // VULHUB: VHN-95338 // JVNDB: JVNDB-2016-005041 // CNNVD: CNNVD-201609-365 // NVD: CVE-2016-6518

PROBLEMTYPE DATA

problemtype:CWE-399

Trust: 1.9

sources: VULHUB: VHN-95338 // JVNDB: JVNDB-2016-005041 // NVD: CVE-2016-6518

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201609-365

TYPE

resource management error

Trust: 0.6

sources: CNNVD: CNNVD-201609-365

CONFIGURATIONS

sources: JVNDB: JVNDB-2016-005041

PATCH

title:huawei-sa-20160914-01-sepurl:http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160914-01-sep-en

Trust: 0.8

title:Patches for several HuaweiSwitches Remote Denial of Service Vulnerabilitiesurl:https://www.cnvd.org.cn/patchInfo/show/81677

Trust: 0.6

title:Multiple Huawei Repair measures for product remote denial of service vulnerabilityurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=64163

Trust: 0.6

sources: CNVD: CNVD-2016-08070 // JVNDB: JVNDB-2016-005041 // CNNVD: CNNVD-201609-365

EXTERNAL IDS

db:NVDid:CVE-2016-6518

Trust: 3.4

db:BIDid:92968

Trust: 2.6

db:JVNDBid:JVNDB-2016-005041

Trust: 0.8

db:CNNVDid:CNNVD-201609-365

Trust: 0.7

db:CNVDid:CNVD-2016-08070

Trust: 0.6

db:VULHUBid:VHN-95338

Trust: 0.1

sources: CNVD: CNVD-2016-08070 // VULHUB: VHN-95338 // BID: 92968 // JVNDB: JVNDB-2016-005041 // CNNVD: CNNVD-201609-365 // NVD: CVE-2016-6518

REFERENCES

url:http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160914-01-sep-en

Trust: 2.6

url:http://www.securityfocus.com/bid/92968

Trust: 2.3

url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-6518

Trust: 0.8

url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-6518

Trust: 0.8

url:http://www.huawei.com

Trust: 0.3

sources: CNVD: CNVD-2016-08070 // VULHUB: VHN-95338 // BID: 92968 // JVNDB: JVNDB-2016-005041 // CNNVD: CNNVD-201609-365 // NVD: CVE-2016-6518

CREDITS

The vendor reported the issue.

Trust: 0.3

sources: BID: 92968

SOURCES

db:CNVDid:CNVD-2016-08070
db:VULHUBid:VHN-95338
db:BIDid:92968
db:JVNDBid:JVNDB-2016-005041
db:CNNVDid:CNNVD-201609-365
db:NVDid:CVE-2016-6518

LAST UPDATE DATE

2024-11-23T22:13:14.066000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2016-08070date:2016-09-26T00:00:00
db:VULHUBid:VHN-95338date:2016-09-28T00:00:00
db:BIDid:92968date:2016-09-14T00:00:00
db:JVNDBid:JVNDB-2016-005041date:2016-10-04T00:00:00
db:CNNVDid:CNNVD-201609-365date:2016-09-27T00:00:00
db:NVDid:CVE-2016-6518date:2024-11-21T02:56:16.780

SOURCES RELEASE DATE

db:CNVDid:CNVD-2016-08070date:2016-09-26T00:00:00
db:VULHUBid:VHN-95338date:2016-09-26T00:00:00
db:BIDid:92968date:2016-09-14T00:00:00
db:JVNDBid:JVNDB-2016-005041date:2016-10-04T00:00:00
db:CNNVDid:CNNVD-201609-365date:2016-09-19T00:00:00
db:NVDid:CVE-2016-6518date:2016-09-26T15:59:01.780