What’s Vulnerable › Vulnerabilities

CVE-2017-17141

• Severity: low (CVSS 3.7 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-03-05 · updated 2026-06-17
• Weakness: CWE-772

Description

Huawei S12700 V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R007C20; V200R008C00; V200R009C00;S1700 V200R006C10; V200R009C00;S2700 V100R006C03; V200R003C00; V200R005C00; V200R006C00; V200R006C10; V200R007C00; V200R007C00B050; V200R007C00SPC009T; V200R007C00SPC019T; V200R008C00; V200R009C00;S3700 V100R006C03;S5700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R003C02; V200R005C00; V200R005C01; V200R005C02; V200R005C03; V200R006C00; V200R007C00; V200R008C00; V200R009C00;S6700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R005C01; V200R005C02; V200R008C00; V200R009C00;S7700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R006C00; V200R006C01; V200R007C00; V200R007C01; V200R008C00; V200R008C06; V200R009C00;S9700 V200R001C00; V200R001C01; V200R002C00; V200R003C00; V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R008C00; V200R009C00 have a memory leak vulnerability. In some specific conditions, if attackers send specific malformed MPLS Service PING messages to the affected products, products do not release the memory when handling the packets. So successful exploit will result in memory leak of the affected products.

Affected products

• Huawei S12700 Firmware: v200r005c00, v200r006c00, v200r007c00, v200r007c01, v200r007c20, v200r008c00 (+1)
• Huawei S1700 Firmware: v200r006c10, v200r009c00
• Huawei S2700 Firmware: v100r006c03, v200r003c00, v200r005c00, v200r006c00, v200r006c10, v200r007c00 (+5)
• Huawei S3700 Firmware: v100r006c03
• Huawei S5700 Firmware: v200r001c00, v200r001c01, v200r002c00, v200r003c00, v200r003c02, v200r005c00 (+7)
• Huawei S6700 Firmware: v200r001c00, v200r001c01, v200r002c00, v200r003c00, v200r005c00, v200r005c01 (+3)
• Huawei S7700 Firmware: v200r001c00, v200r001c01, v200r002c00, v200r003c00, v200r005c00, v200r006c00 (+6)
• Huawei S9700 Firmware: v200r001c00, v200r001c01, v200r002c00, v200r003c00, v200r005c00, v200r006c00 (+4)

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-mpls-en
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-mpls-en

Get alerted when CVE-2017-17141 or the next vulnerability affects your stack