Sign-up

ID

VAR-201803-1334


CVE

CVE-2017-17143


TITLE

plural Huawei Buffer error vulnerability in product

Trust: 0.8

sources: JVNDB: JVNDB-2017-012856

DESCRIPTION

SIP module in Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; RP200 V500R002C00SPC200; V600R006C00; V600R006C00SPC200; RSE6500 V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC300T; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00T; TE30 V100R001C10; V100R001C10SPC100; V100R001C10SPC200B010; V100R001C10SPC300; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700B010; V100R001C10SPC800; V500R002C00SPC200; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; TE40 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; TE50 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; TE60 V100R001C01SPC100; V100R001C01SPC107TB010; V100R001C10; V100R001C10SPC300; V100R001C10SPC400; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700; V100R001C10SPC800; V100R001C10SPC900; V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; V500R002C00SPCb00; V500R002C00SPCd00; V600R006C00; V600R006C00SPC100; V600R006C00SPC200; V600R006C00SPC300; TP3106 V100R002C00; V100R002C00SPC200; V100R002C00SPC400; V100R002C00SPC600; V100R002C00SPC700; V100R002C00SPC800; TP3206 V100R002C00; V100R002C00SPC200; V100R002C00SPC400; V100R002C00SPC600; V100R002C00SPC700; V100R002C10; ViewPoint 9030 V100R011C02SPC100; V100R011C03B012SP15; V100R011C03B012SP16; V100R011C03B015SP03; V100R011C03LGWL01SPC100; V100R011C03SPC100; V100R011C03SPC200; V100R011C03SPC300; V100R011C03SPC400; V100R011C03SPC500; eSpace U1960 V200R003C30SPC200; eSpace U1981 V100R001C20SPC700; V200R003C20SPCa00 has an overflow vulnerability that the module cannot parse a malformed SIP message when validating variables. Attacker can exploit it to make one process reboot at random. plural Huawei The product contains a buffer error vulnerability.Denial of service (DoS) May be in a state. Huawei DP300, RP200, RSE6500, and TE30/40/50/60 are all products of China Huawei. This vulnerability is caused by the device not fully verifying some values in the SIP packet. An unauthenticated remote attacker sends a specially constructed message to the affected device, causing some processes to restart probabilistically, affecting availability. DP300 is a video conferencing terminal. eSpace U1981 is a voice gateway product. The following products and versions are affected: Huawei DP300 V500R002C00 Version, V500R002C00SPC100 Version, V500R002C00SPC200 Version, V500R002C00SPC300 Version, V500R002C00SPC400 Version, V500R002C00SPC500 Version, V500R002C00SPC600 Version, V500R002C00SPC800 Version, V500R002C00SPC900 Version, V500R002C00SPCa00 Version; RP200 V500R002C00SPC200 Version, V600R006C00 Version, V600R006C00SPC200 Version; RSE6500 Version V500R002C00SPC100, Version V500R002C00SPC200, Version V500R002C00SPC300, Version V500R002C00SPC300T, Version V500R002C00SPC500, Version V500R002C00SPC600, Version V500R002C00SPC700T;

Trust: 2.25

sources: NVD: CVE-2017-17143 // JVNDB: JVNDB-2017-012856 // CNVD: CNVD-2017-38455 // VULHUB: VHN-108136

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2017-38455

AFFECTED PRODUCTS

vendor:huaweimodel:viewpoint 9030scope:eqversion:v100r011c03spc200

Trust: 1.6

vendor:huaweimodel:viewpoint 9030scope:eqversion:v100r011c03lgwl01spc100

Trust: 1.6

vendor:huaweimodel:viewpoint 9030scope:eqversion:v100r011c03spc400

Trust: 1.6

vendor:huaweimodel:viewpoint 9030scope:eqversion:v100r011c03spc100

Trust: 1.6

vendor:huaweimodel:espace u1960scope:eqversion:v200r003c30spc200

Trust: 1.6

vendor:huaweimodel:viewpoint 9030scope:eqversion:v100r011c03b015sp03

Trust: 1.6

vendor:huaweimodel:viewpoint 9030scope:eqversion:v100r011c03spc500

Trust: 1.6

vendor:huaweimodel:espace u1981scope:eqversion:v200r003c20spca00

Trust: 1.6

vendor:huaweimodel:espace u1981scope:eqversion:v100r001c20spc700

Trust: 1.6

vendor:huaweimodel:viewpoint 9030scope:eqversion:v100r011c03spc300

Trust: 1.6

vendor:huaweimodel:te30scope:eqversion:v500r002c00spc700

Trust: 1.0

vendor:huaweimodel:te60scope:eqversion:v600r006c00spc300

Trust: 1.0

vendor:huaweimodel:te30scope:eqversion:v100r001c10spc600

Trust: 1.0

vendor:huaweimodel:te30scope:eqversion:v100r001c10spc700b010

Trust: 1.0

vendor:huaweimodel:te40scope:eqversion:v500r002c00spc900

Trust: 1.0

vendor:huaweimodel:rp200scope:eqversion:v500r002c00spc200

Trust: 1.0

vendor:huaweimodel:te60scope:eqversion:v500r002c00spc800

Trust: 1.0

vendor:huaweimodel:tp3106scope:eqversion:v100r002c00spc400

Trust: 1.0

vendor:huaweimodel:dp300scope:eqversion:v500r002c00spc200

Trust: 1.0

vendor:huaweimodel:tp3206scope:eqversion:v100r002c00spc200

Trust: 1.0

vendor:huaweimodel:te60scope:eqversion:v500r002c00spc300

Trust: 1.0

vendor:huaweimodel:te40scope:eqversion:v600r006c00spc200

Trust: 1.0

vendor:huaweimodel:dp300scope:eqversion:v500r002c00spca00

Trust: 1.0

vendor:huaweimodel:te60scope:eqversion:v100r001c10spc300

Trust: 1.0

vendor:huaweimodel:dp300scope:eqversion:v500r002c00spc600

Trust: 1.0

vendor:huaweimodel:viewpoint 9030scope:eqversion:v100r011c03b012sp15

Trust: 1.0

vendor:huaweimodel:tp3106scope:eqversion:v100r002c00

Trust: 1.0

vendor:huaweimodel:rse6500scope:eqversion:v500r002c00spc100

Trust: 1.0

vendor:huaweimodel:dp300scope:eqversion:v500r002c00spc400

Trust: 1.0

vendor:huaweimodel:te60scope:eqversion:v500r002c00spcd00

Trust: 1.0

vendor:huaweimodel:te30scope:eqversion:v500r002c00spc900

Trust: 1.0

vendor:huaweimodel:te60scope:eqversion:v100r001c01spc107tb010

Trust: 1.0

vendor:huaweimodel:te60scope:eqversion:v500r002c00spc700

Trust: 1.0

vendor:huaweimodel:te30scope:eqversion:v100r001c10

Trust: 1.0

vendor:huaweimodel:tp3106scope:eqversion:v100r002c00spc800

Trust: 1.0

vendor:huaweimodel:rp200scope:eqversion:v600r006c00

Trust: 1.0

vendor:huaweimodel:rse6500scope:eqversion:v500r002c00t

Trust: 1.0

vendor:huaweimodel:tp3206scope:eqversion:v100r002c00spc700

Trust: 1.0

vendor:huaweimodel:te30scope:eqversion:v100r001c10spc100

Trust: 1.0

vendor:huaweimodel:te60scope:eqversion:v500r002c00

Trust: 1.0

vendor:huaweimodel:tp3106scope:eqversion:v100r002c00spc200

Trust: 1.0

vendor:huaweimodel:rse6500scope:eqversion:v500r002c00spc500

Trust: 1.0

vendor:huaweimodel:viewpoint 9030scope:eqversion:v100r011c03b012sp16

Trust: 1.0

vendor:huaweimodel:te40scope:eqversion:v500r002c00spcb00

Trust: 1.0

vendor:huaweimodel:te60scope:eqversion:v600r006c00

Trust: 1.0

vendor:huaweimodel:tp3206scope:eqversion:v100r002c00spc400

Trust: 1.0

vendor:huaweimodel:te30scope:eqversion:v500r002c00spc200

Trust: 1.0

vendor:huaweimodel:te60scope:eqversion:v100r001c10spc400

Trust: 1.0

vendor:huaweimodel:viewpoint 9030scope:eqversion:v100r011c02spc100

Trust: 1.0

vendor:huaweimodel:te50scope:eqversion:v500r002c00spc600

Trust: 1.0

vendor:huaweimodel:tp3106scope:eqversion:v100r002c00spc700

Trust: 1.0

vendor:huaweimodel:te30scope:eqversion:v500r002c00spc600

Trust: 1.0

vendor:huaweimodel:rp200scope:eqversion:v600r006c00spc200

Trust: 1.0

vendor:huaweimodel:te50scope:eqversion:v500r002c00spc700

Trust: 1.0

vendor:huaweimodel:te60scope:eqversion:v500r002c00spc100

Trust: 1.0

vendor:huaweimodel:te50scope:eqversion:v500r002c00spcb00

Trust: 1.0

vendor:huaweimodel:te60scope:eqversion:v500r002c00spc900

Trust: 1.0

vendor:huaweimodel:te30scope:eqversion:v500r002c00spcb00

Trust: 1.0

vendor:huaweimodel:te60scope:eqversion:v100r001c10

Trust: 1.0

vendor:huaweimodel:te60scope:eqversion:v100r001c10spc700

Trust: 1.0

vendor:huaweimodel:te60scope:eqversion:v600r006c00spc100

Trust: 1.0

vendor:huaweimodel:dp300scope:eqversion:v500r002c00spc500

Trust: 1.0

vendor:huaweimodel:te60scope:eqversion:v600r006c00spc200

Trust: 1.0

vendor:huaweimodel:dp300scope:eqversion:v500r002c00spc800

Trust: 1.0

vendor:huaweimodel:te50scope:eqversion:v600r006c00

Trust: 1.0

vendor:huaweimodel:te30scope:eqversion:v600r006c00

Trust: 1.0

vendor:huaweimodel:dp300scope:eqversion:v500r002c00spc300

Trust: 1.0

vendor:huaweimodel:rse6500scope:eqversion:v500r002c00spc300t

Trust: 1.0

vendor:huaweimodel:te60scope:eqversion:v100r001c01spc100

Trust: 1.0

vendor:huaweimodel:te60scope:eqversion:v100r001c10spc900

Trust: 1.0

vendor:huaweimodel:tp3106scope:eqversion:v100r002c00spc600

Trust: 1.0

vendor:huaweimodel:te60scope:eqversion:v100r001c10spc500

Trust: 1.0

vendor:huaweimodel:te30scope:eqversion:v100r001c10spc800

Trust: 1.0

vendor:huaweimodel:te60scope:eqversion:v500r002c00spc200

Trust: 1.0

vendor:huaweimodel:te60scope:eqversion:v500r002c00spca00

Trust: 1.0

vendor:huaweimodel:te60scope:eqversion:v500r002c00spc600

Trust: 1.0

vendor:huaweimodel:te60scope:eqversion:v500r002c00spcb00

Trust: 1.0

vendor:huaweimodel:dp300scope:eqversion:v500r002c00

Trust: 1.0

vendor:huaweimodel:te50scope:eqversion:v600r006c00spc200

Trust: 1.0

vendor:huaweimodel:tp3206scope:eqversion:v100r002c10

Trust: 1.0

vendor:huaweimodel:te60scope:eqversion:v100r001c10spc600

Trust: 1.0

vendor:huaweimodel:te40scope:eqversion:v500r002c00spc600

Trust: 1.0

vendor:huaweimodel:te30scope:eqversion:v500r002c00spc500

Trust: 1.0

vendor:huaweimodel:rse6500scope:eqversion:v500r002c00spc300

Trust: 1.0

vendor:huaweimodel:te40scope:eqversion:v500r002c00spc700

Trust: 1.0

vendor:huaweimodel:te30scope:eqversion:v100r001c10spc500

Trust: 1.0

vendor:huaweimodel:te60scope:eqversion:v100r001c10spc800

Trust: 1.0

vendor:huaweimodel:rse6500scope:eqversion:v500r002c00spc200

Trust: 1.0

vendor:huaweimodel:te30scope:eqversion:v100r001c10spc300

Trust: 1.0

vendor:huaweimodel:tp3206scope:eqversion:v100r002c00spc600

Trust: 1.0

vendor:huaweimodel:dp300scope:eqversion:v500r002c00spc100

Trust: 1.0

vendor:huaweimodel:dp300scope:eqversion:v500r002c00spc900

Trust: 1.0

vendor:huaweimodel:rse6500scope:eqversion:v500r002c00spc600

Trust: 1.0

vendor:huaweimodel:te40scope:eqversion:v600r006c00

Trust: 1.0

vendor:huaweimodel:te30scope:eqversion:v100r001c10spc200b010

Trust: 1.0

vendor:huaweimodel:rse6500scope:eqversion:v500r002c00spc700

Trust: 1.0

vendor:huaweimodel:tp3206scope:eqversion:v100r002c00

Trust: 1.0

vendor:huaweimodel:dp300scope: - version: -

Trust: 0.8

vendor:huaweimodel:espace u1960scope: - version: -

Trust: 0.8

vendor:huaweimodel:espace u1981scope: - version: -

Trust: 0.8

vendor:huaweimodel:rp200scope: - version: -

Trust: 0.8

vendor:huaweimodel:rse6500scope: - version: -

Trust: 0.8

vendor:huaweimodel:te30scope: - version: -

Trust: 0.8

vendor:huaweimodel:te40scope: - version: -

Trust: 0.8

vendor:huaweimodel:te50scope: - version: -

Trust: 0.8

vendor:huaweimodel:te60scope: - version: -

Trust: 0.8

vendor:huaweimodel:tp3106scope: - version: -

Trust: 0.8

vendor:huaweimodel:tp3206scope: - version: -

Trust: 0.8

vendor:huaweimodel:viewpoint 9030scope: - version: -

Trust: 0.8

vendor:huaweimodel:dp300 v500r002c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:te60 v500r002c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:te60 v600r006c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:tp3206 v100r002c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:tp3106 v100r002c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:rp200 v600r006c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:rse6500 v500r002c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:te30 v100r001c10scope: - version: -

Trust: 0.6

vendor:huaweimodel:te40 v600r006c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:te50 v600r006c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:rp200 v500r002c00spc200scope: - version: -

Trust: 0.6

vendor:huaweimodel:te30 v100r001c10spc300scope: - version: -

Trust: 0.6

vendor:huaweimodel:te30 v100r001c10spc500scope: - version: -

Trust: 0.6

vendor:huaweimodel:te30 v100r001c10spc600scope: - version: -

Trust: 0.6

vendor:huaweimodel:te30 v500r002c00spc200scope: - version: -

Trust: 0.6

vendor:huaweimodel:te30 v500r002c00spc500scope: - version: -

Trust: 0.6

vendor:huaweimodel:te30 v500r002c00spc600scope: - version: -

Trust: 0.6

vendor:huaweimodel:te30 v500r002c00spc700scope: - version: -

Trust: 0.6

vendor:huaweimodel:te30 v500r002c00spc900scope: - version: -

Trust: 0.6

vendor:huaweimodel:te30 v500r002c00spcb00scope: - version: -

Trust: 0.6

vendor:huaweimodel:te40 v500r002c00spc600scope: - version: -

Trust: 0.6

vendor:huaweimodel:te40 v500r002c00spc700scope: - version: -

Trust: 0.6

vendor:huaweimodel:te40 v500r002c00spc900scope: - version: -

Trust: 0.6

vendor:huaweimodel:te40 v500r002c00spcb00scope: - version: -

Trust: 0.6

vendor:huaweimodel:te50 v500r002c00spc600scope: - version: -

Trust: 0.6

vendor:huaweimodel:te50 v500r002c00spc700scope: - version: -

Trust: 0.6

vendor:huaweimodel:te50 v500r002c00spcb00scope: - version: -

Trust: 0.6

vendor:huaweimodel:dp300 v500r002c00spc100scope: - version: -

Trust: 0.6

vendor:huaweimodel:dp300 v500r002c00spc200scope: - version: -

Trust: 0.6

vendor:huaweimodel:dp300 v500r002c00spc300scope: - version: -

Trust: 0.6

vendor:huaweimodel:dp300 v500r002c00spc400scope: - version: -

Trust: 0.6

vendor:huaweimodel:dp300 v500r002c00spc50scope: - version: -

Trust: 0.6

vendor:huaweimodel:dp300 v500r002c00spc600scope: - version: -

Trust: 0.6

vendor:huaweimodel:dp300 v500r002c00spc800scope: - version: -

Trust: 0.6

vendor:huaweimodel:dp300 v500r002c00spc900scope: - version: -

Trust: 0.6

vendor:huaweimodel:dp300 v500r002c00spca00scope: - version: -

Trust: 0.6

vendor:huaweimodel:te40 v600r006c00spc200scope: - version: -

Trust: 0.6

vendor:huaweimodel:te50 v600r006c00spc200scope: - version: -

Trust: 0.6

vendor:huaweimodel:te60 v600r006c00spc200scope: - version: -

Trust: 0.6

vendor:huaweimodel:te60 v600r006c00spc300scope: - version: -

Trust: 0.6

vendor:huaweimodel:te60 v600r006c00spc100scope: - version: -

Trust: 0.6

vendor:huaweimodel:te60 v100r001c10spc400scope: - version: -

Trust: 0.6

vendor:huaweimodel:te60 v100r001c10spc500scope: - version: -

Trust: 0.6

vendor:huaweimodel:te60 v100r001c10spc600scope: - version: -

Trust: 0.6

vendor:huaweimodel:te60 v100r001c10spc700scope: - version: -

Trust: 0.6

vendor:huaweimodel:te60 v100r001c10spc900scope: - version: -

Trust: 0.6

vendor:huaweimodel:te60 v500r002c00spc100scope: - version: -

Trust: 0.6

vendor:huaweimodel:te60 v500r002c00spc200scope: - version: -

Trust: 0.6

vendor:huaweimodel:te60 v500r002c00spc300scope: - version: -

Trust: 0.6

vendor:huaweimodel:te60 v500r002c00spc600scope: - version: -

Trust: 0.6

vendor:huaweimodel:te60 v500r002c00spc700scope: - version: -

Trust: 0.6

vendor:huaweimodel:te60 v500r002c00spc800scope: - version: -

Trust: 0.6

vendor:huaweimodel:te60 v500r002c00spc900scope: - version: -

Trust: 0.6

vendor:huaweimodel:te60 v500r002c00spca00scope: - version: -

Trust: 0.6

vendor:huaweimodel:te60 v500r002c00spcb00scope: - version: -

Trust: 0.6

vendor:huaweimodel:te60 v500r002c00spcd00scope: - version: -

Trust: 0.6

vendor:huaweimodel:rp200 v600r006c00spc200scope: - version: -

Trust: 0.6

vendor:huaweimodel:rse6500 v500r002c00spc100scope: - version: -

Trust: 0.6

vendor:huaweimodel:rse6500 v500r002c00spc200scope: - version: -

Trust: 0.6

vendor:huaweimodel:rse6500 v500r002c00spc300scope: - version: -

Trust: 0.6

vendor:huaweimodel:rse6500 v500r002c00spc300tscope: - version: -

Trust: 0.6

vendor:huaweimodel:rse6500 v500r002c00spc500scope: - version: -

Trust: 0.6

vendor:huaweimodel:rse6500 v500r002c00spc600scope: - version: -

Trust: 0.6

vendor:huaweimodel:rse6500 v500r002c00spc700scope: - version: -

Trust: 0.6

vendor:huaweimodel:rse6500 v500r002c00tscope: - version: -

Trust: 0.6

vendor:huaweimodel:te30 v100r001c10spc100scope: - version: -

Trust: 0.6

vendor:huaweimodel:te30 v100r001c10spc200b010scope: - version: -

Trust: 0.6

vendor:huaweimodel:te30 v100r001c10spc800scope: - version: -

Trust: 0.6

vendor:huaweimodel:te60 v100r001c01spc100scope: - version: -

Trust: 0.6

vendor:huaweimodel:te60 v100r001c01spc107tb010scope: - version: -

Trust: 0.6

vendor:huaweimodel:te60 v100r001c10spc300scope: - version: -

Trust: 0.6

vendor:huaweimodel:te60 v100r001c10spc800scope: - version: -

Trust: 0.6

vendor:huaweimodel:tp3106 v100r002c00spc200scope: - version: -

Trust: 0.6

vendor:huaweimodel:tp3106 v100r002c00spc400scope: - version: -

Trust: 0.6

vendor:huaweimodel:tp3106 v100r002c00spc600scope: - version: -

Trust: 0.6

vendor:huaweimodel:tp3106 v100r002c00spc700scope: - version: -

Trust: 0.6

vendor:huaweimodel:tp3106 v100r002c00spc800scope: - version: -

Trust: 0.6

vendor:huaweimodel:tp3206 v100r002c00spc200scope: - version: -

Trust: 0.6

vendor:huaweimodel:tp3206 v100r002c00spc400scope: - version: -

Trust: 0.6

vendor:huaweimodel:tp3206 v100r002c00spc600scope: - version: -

Trust: 0.6

vendor:huaweimodel:tp3206 v100r002c00spc700scope: - version: -

Trust: 0.6

vendor:huaweimodel:viewpoint v100r011c02spc100scope:eqversion:9030

Trust: 0.6

vendor:huaweimodel:viewpoint v100r011c03b012sp15scope:eqversion:9030

Trust: 0.6

vendor:huaweimodel:viewpoint v100r011c03b012sp16scope:eqversion:9030

Trust: 0.6

vendor:huaweimodel:viewpoint v100r011c03b015sp03scope:eqversion:9030

Trust: 0.6

vendor:huaweimodel:viewpoint v100r011c03lgwl01spc100scope:eqversion:9030

Trust: 0.6

vendor:huaweimodel:viewpoint v100r011c03spc100scope:eqversion:9030

Trust: 0.6

vendor:huaweimodel:viewpoint v100r011c03spc200scope:eqversion:9030

Trust: 0.6

vendor:huaweimodel:viewpoint v100r011c03spc300scope:eqversion:9030

Trust: 0.6

vendor:huaweimodel:viewpoint v100r011c03spc400scope:eqversion:9030

Trust: 0.6

vendor:huaweimodel:viewpoint v100r011c03spc500scope:eqversion:9030

Trust: 0.6

vendor:huaweimodel:espace u1960 v200r003c30spc200scope: - version: -

Trust: 0.6

vendor:huaweimodel:espace u1981 v100r001c20spc700scope: - version: -

Trust: 0.6

vendor:huaweimodel:espace u1981 v200r003c20spca00scope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2017-38455 // JVNDB: JVNDB-2017-012856 // CNNVD: CNNVD-201712-300 // NVD: CVE-2017-17143

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2017-17143
value: MEDIUM

Trust: 1.0

NVD: CVE-2017-17143
value: MEDIUM

Trust: 0.8

CNVD: CNVD-2017-38455
value: MEDIUM

Trust: 0.6

CNNVD: CNNVD-201712-300
value: MEDIUM

Trust: 0.6

VULHUB: VHN-108136
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2017-17143
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

CNVD: CNVD-2017-38455
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

VULHUB: VHN-108136
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2017-17143
baseSeverity: MEDIUM
baseScore: 5.3
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: LOW
exploitabilityScore: 3.9
impactScore: 1.4
version: 3.0

Trust: 1.8

sources: CNVD: CNVD-2017-38455 // VULHUB: VHN-108136 // JVNDB: JVNDB-2017-012856 // CNNVD: CNNVD-201712-300 // NVD: CVE-2017-17143

PROBLEMTYPE DATA

problemtype:CWE-119

Trust: 1.9

sources: VULHUB: VHN-108136 // JVNDB: JVNDB-2017-012856 // NVD: CVE-2017-17143

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201712-300

TYPE

buffer overflow

Trust: 0.6

sources: CNNVD: CNNVD-201712-300

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2017-012856

PATCH
title:huawei-sa-20171206-01-sipurl:http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-sip-en
Trust: 0.8
title:Patch for multiple Huawei product SIP module buffer overflow vulnerability (CNVD-2017-38455)url:https://www.cnvd.org.cn/patchInfo/show/112103
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2017-38455 // 
            
            
            
            JVNDB: JVNDB-2017-012856

EXTERNAL IDS
db:NVDid:CVE-2017-17143
Trust: 3.1
db:JVNDBid:JVNDB-2017-012856
Trust: 0.8
db:CNNVDid:CNNVD-201712-300
Trust: 0.7
db:CNVDid:CNVD-2017-38455
Trust: 0.6
db:VULHUBid:VHN-108136
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2017-38455 // 
            
            
            
            VULHUB: VHN-108136 // 
            
            
            
            JVNDB: JVNDB-2017-012856 // 
            
            
            
            CNNVD: CNNVD-201712-300 // 
            
            
            
            NVD: CVE-2017-17143

REFERENCES
url:http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-sip-en
Trust: 1.7
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-17143
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2017-17143
Trust: 0.8
url:http://www.huawei.com/cn/psirt/security-advisories/2017/huawei-sa-20171206-01-sip-cn
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2017-38455 // 
            
            
            
            VULHUB: VHN-108136 // 
            
            
            
            JVNDB: JVNDB-2017-012856 // 
            
            
            
            CNNVD: CNNVD-201712-300 // 
            
            
            
            NVD: CVE-2017-17143

SOURCES
db:CNVDid:CNVD-2017-38455
db:VULHUBid:VHN-108136
db:JVNDBid:JVNDB-2017-012856
db:CNNVDid:CNNVD-201712-300
db:NVDid:CVE-2017-17143

LAST UPDATE DATE
2024-11-23T22:12:38.649000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2017-38455date:2017-12-28T00:00:00
db:VULHUBid:VHN-108136date:2018-03-27T00:00:00
db:JVNDBid:JVNDB-2017-012856date:2018-04-24T00:00:00
db:CNNVDid:CNNVD-201712-300date:2018-03-06T00:00:00
db:NVDid:CVE-2017-17143date:2024-11-21T03:17:34.347

SOURCES RELEASE DATE
db:CNVDid:CNVD-2017-38455date:2017-12-28T00:00:00
db:VULHUBid:VHN-108136date:2018-03-05T00:00:00
db:JVNDBid:JVNDB-2017-012856date:2018-04-24T00:00:00
db:CNNVDid:CNNVD-201712-300date:2017-12-07T00:00:00
db:NVDid:CVE-2017-17143date:2018-03-05T19:29:00.863