CVE-2015-8676 Information

Description

Memory leak in Huawei S5300EI S5300SI S5310HI S6300EI/ S2350EI and S5300LI Campus series switches with software V200R001C00 before V200R001SPH018 V200R002C00 before V200R003SPH011 and V200R003C00 before V200R003SPH011; S9300 S7700 and S9700 Campus series switches with software V200R001C00 before V200R001SPH023 V200R002C00 before V200R003SPH011 and V200R003C00 before V200R003SPH011; and S2300 and S3300 Campus series switches with software V100R006C05 before V100R006SPH022 allows remote attackers to cause a denial of service (memory consumption and reboot) via a large number of ICMPv6 packets.

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Reference

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160113-02-switch-en

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

NONE

Availability Impact

NONE

Base Score

HIGH

Base Severity

7.5