Out-of-bounds read in Huawei products - CVE-2020-9094

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary condition when a module does not deal with specific message properly. A remote attacker can send a malicious packet, trigger out-of-bounds read error and cause a denial of service condition on the system.

Affected software

How to mitigate CVE-2020-9094

External References

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201216-01-obr-en

Related Security Bulletins

• Multiple vulnerabilities in some Huawei Products