NVD

Id
20190  
Name
CVE-2016-4577  
Description
Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300, USG6500, USG6600, and USG9500 firewalls with software before V500R001C20SPC100 allows remote attackers to cause a denial of service or execute arbitrary code via a crafted packet, related to "illegitimate parameters."  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.2  
CVSS Vector
(AV:A/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-05-23  
Modified Date
2016-11-28  
Seq
2016-4577  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
110265 20190 CVE-2016-4577 http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160511-01-dns-en  View
110266 20190 CVE-2016-4577 90532  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2136 JVNDB-2016-002909 複数の Huawei デバイス製品のソフトウェアの Smart DNS 機能におけるバッファオーバーフローの脆弱性 複数の Huawei デバイス製品のソフトウェアの Smart DNS 機能には、"違法なパラメータ (illegitimate parameters)" に関する処理に不備があるため、バッファオーバーフローの脆弱性が存在します。 CVE-2016-4577 91083 CVE-2016-4577 20190 6.8 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002909.html 2016-05-11 2016-05-27 View