Double Free in Huawei products - CVE-2021-22332
Published: April 7, 2021
Vulnerability identifier: #VU51958
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-22332
CWE-ID: CWE-415
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary error. A remote attacker can pass specially crafted data to the application, trigger double free error and cause a denial of service condition on the target system.
Affected software
Huawei CloudEngine 12800
Huawei CloudEngine 5800
Huawei CloudEngine 6800
Huawei CloudEngine 7800
Huawei CloudEngine 5800
Huawei CloudEngine 6800
Huawei CloudEngine 7800
How to mitigate CVE-2021-22332
Install updates from vendor's website.
Huawei CloudEngine 12800 - update to V200R005SPH025
Huawei CloudEngine 5800 - update to V200R005SPH023
Huawei CloudEngine 6800 - update to V200R005SPH025
Huawei CloudEngine 7800 - update to V200R005SPH025
Huawei CloudEngine 5800 - update to V200R005SPH023
Huawei CloudEngine 6800 - update to V200R005SPH025
Huawei CloudEngine 7800 - update to V200R005SPH025