Vulnerability Description
There is a memory leak vulnerability in CloudEngine 12800 V200R019C00SPC800, CloudEngine 5800 V200R019C00SPC800, CloudEngine 6800 V200R019C00SPC800 and CloudEngine 7800 V200R019C00SPC800. The software does not sufficiently track and release allocated memory while parse a series of crafted binary messages, which could consume remaining memory. Successful exploit could cause memory exhaust.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Cloudengine 7800 Firmware | v200r019c00spc800 |
| Huawei | Cloudengine 7800 | - |
| Huawei | Cloudengine 6800 Firmware | v200r019c00spc800 |
| Huawei | Cloudengine 6800 | - |
| Huawei | Cloudengine 5800 Firmware | v200r019c00spc800 |
| Huawei | Cloudengine 5800 | - |
| Huawei | Cloudengine 12800 Firmware | v200r019c00spc800 |
| Huawei | Cloudengine 12800 | - |
Related Weaknesses (CWE)
References
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20211208-01-memleaVendor Advisory
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20211208-01-memleaVendor Advisory
FAQ
What is CVE-2021-40008?
CVE-2021-40008 is a vulnerability with a CVSS score of 7.5 (HIGH). There is a memory leak vulnerability in CloudEngine 12800 V200R019C00SPC800, CloudEngine 5800 V200R019C00SPC800, CloudEngine 6800 V200R019C00SPC800 and CloudEngine 7800 V200R019C00SPC800. The software...
How severe is CVE-2021-40008?
CVE-2021-40008 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-40008?
Check the references section above for vendor advisories and patch information. Affected products include: Huawei Cloudengine 7800 Firmware, Huawei Cloudengine 7800, Huawei Cloudengine 6800 Firmware, Huawei Cloudengine 6800, Huawei Cloudengine 5800 Firmware.