Out-of-Bounds Write Vulnerability in Huawei Networking Devices

CVE-2017-17250

Summary

Huawei networking devices are susceptible to an out-of-bounds write vulnerability. This occurs when an abnormal OSPF message is received and a query command is executed, leading to insufficient verification of the input data. As a result, the software writes data beyond the allocated buffer, which can be exploited by an unauthenticated, remote attacker. This exploit may cause the affected devices to crash, affecting network stability and performance.

References