Huawei CloudEngine 12800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00 have a memory leak vulnerability.

Published 8 y ago 2018-03-09 · modified 4 mo ago 2026-06-17 · JSON

CVSS

4.3

v3.0 · NVD

CISA KEV

not known exploited

EPSS

0.4%

percentile 37%

Public exploits

none known

Huawei CloudEngine 12800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00 have a memory leak vulnerability. An unauthenticated attacker may send specific Label Distribution Protocol (LDP) packets to the devices. When the values of some parameters in the packet are abnormal, the LDP processing module does not release the memory to handle the packet, resulting in memory leak.

Exploit prediction (EPSS)

0.42% probability of exploitation in the next 30 days, higher than 37% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.0	4.3	`CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L`
NVD	2.0	3.3	`AV:A/AC:L/Au:N/C:N/I:N/A:P`

Affected products

Huawei Technologies Co., Ltd. CloudEngine 12800

Classification

Weakness

CWE-399 Resource Management Errors

References

huawei.com /en/psirt/security-advisories/huawei-sa-20161221-01-ldp-en · x_refsource_CONFIRM, x_transferred
securityfocus.com /bid/95079 · vdb-entry, x_refsource_BID, x_transferred

Sources

CVE List: CVE-2016-8784
NVD: CVE-2016-8784

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.