CVE-2016-8797 Information

Description

Huawei AR3200 with software V200R007C00 V200R005C32 V200R005C20; S12700 with software V200R008C00 V200R007C00; S5300 with software V200R008C00 V200R007C00 V200R006C00; S5700 with software V200R008C00 V200R007C00 V200R006C00; S6300 with software V200R008C00 V200R007C00; S6700 with software V200R008C00 V200R007C00; S7700 with software V200R008C00 V200R007C00 V200R006C00; S9300 with software V200R008C00 V200R007C00 V200R006C00; and S9700 with software V200R008C00 V200R007C00 V200R006C00 allow remote attackers to send abnormal Multiprotocol Label Switching (MPLS) packets to cause memory exhaustion.

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Reference

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160608-01-mpls-en

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

NONE

Availability Impact

NONE

Base Score

HIGH

Base Severity

7.5