Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200R005C00 before V200R005SPH008; S2350EI and S5300LI Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH008, and V200R006C00 before V200R006SPH002; S9300, S7700, and S9700 Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH009, and V200R006C00 before V200R006SPH003; S5720HI and S5720EI Campus series switches with software V200R006C00 before V200R006SPH002; and S2300 and S3300 Campus series switches with software V100R006C05 before V100R006SPH022 allows remote authenticated users to cause a denial of service (memory consumption and device restart) by logging in and out of the (1) HTTPS or (2) SFTP server, related to SSL session information.

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact None

Integrity Impact None

Availability Impact Complete

This CVE is not in the KEV list.

The EPSS score is 0.00242.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
n/a n/a affected
Version Status Constraints
n/a affected —

Configuration 1 [-]

AND
OR cpe:2.3:o:huawei:s5300ei_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:huawei:s5300ei_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:s5300ei:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND
OR cpe:2.3:o:huawei:s5300si_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:huawei:s5300si_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:s5300si:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND
OR cpe:2.3:o:huawei:s5310hi_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:huawei:s5310hi_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:s5310hi:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND
OR cpe:2.3:o:huawei:s6300ei_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:huawei:s6300ei_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:s6300ei:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND
OR cpe:2.3:o:huawei:s5300li_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:huawei:s5300li_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:huawei:s5300li_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:s5300li:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND
OR cpe:2.3:o:huawei:s2350ei_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:huawei:s2350ei_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:huawei:s2350ei_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:s2350ei:-:*:*:*:*:*:*:*

Configuration 7 [-]

AND
OR cpe:2.3:o:huawei:s9300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:huawei:s9300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:huawei:s9300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:s9300:-:*:*:*:*:*:*:*

Configuration 8 [-]

AND
OR cpe:2.3:o:huawei:s9700_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:huawei:s9700_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:huawei:s9700_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:s9700:-:*:*:*:*:*:*:*

Configuration 9 [-]

AND
OR cpe:2.3:o:huawei:s7700_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:huawei:s7700_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:huawei:s7700_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:s7700:-:*:*:*:*:*:*:*

Configuration 10 [-]

AND
cpe:2.3:o:huawei:s5720hi_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:s5720hi:-:*:*:*:*:*:*:*

Configuration 11 [-]

AND
cpe:2.3:o:huawei:s5720ei_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:s5720ei:-:*:*:*:*:*:*:*

Configuration 12 [-]

AND
cpe:2.3:o:huawei:s2300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:s2300:-:*:*:*:*:*:*:*

Configuration 13 [-]

AND
cpe:2.3:o:huawei:s3300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:s3300:-:*:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Huawei Subscribe
S2300 Subscribe
S2300 Firmware Subscribe
S2350ei Subscribe
S2350ei Firmware Subscribe
S3300 Subscribe
S3300 Firmware Subscribe
S5300ei Subscribe
S5300ei Firmware Subscribe
S5300li Subscribe
S5300li Firmware Subscribe
S5300si Subscribe
S5300si Firmware Subscribe
S5310hi Subscribe
S5310hi Firmware Subscribe
S5720ei Subscribe
S5720ei Firmware Subscribe
S5720hi Subscribe
S5720hi Firmware Subscribe
S6300ei Subscribe
S6300ei Firmware Subscribe
S7700 Subscribe
S7700 Firmware Subscribe
S9300 Subscribe
S9300 Firmware Subscribe
S9700 Subscribe
S9700 Firmware Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2015-8554 Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200R005C00 before V200R005SPH008; S2350EI and S5300LI Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH008, and V200R006C00 before V200R006SPH002; S9300, S7700, and S9700 Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH009, and V200R006C00 before V200R006SPH003; S5720HI and S5720EI Campus series switches with software V200R006C00 before V200R006SPH002; and S2300 and S3300 Campus series switches with software V100R006C05 before V100R006SPH022 allows remote authenticated users to cause a denial of service (memory consumption and device restart) by logging in and out of the (1) HTTPS or (2) SFTP server, related to SSL session information.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160113-03-switch-en cve-icon cve-icon
History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-06T08:29:20.208Z

Reserved: 2015-12-25T00:00:00

Link: CVE-2015-8677

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2016-04-14T15:59:03.857

Modified: 2025-04-12T10:46:40.837

Link: CVE-2015-8677

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses