CVE-2017-17283

Vulnerability

An out-of-bounds read vulnerability exists in the Session Initiation Protocol (SIP) module of several Huawei products. Affected versions include: DP300 V500R002C00, RP200 V500R002C00 and V600R006C00, TE30 V100R001C10, V500R002C00, and V600R006C00, TE40 V500R002C00 and V600R006C00, TE50 V500R002C00 and V600R006C00, and TE60 V100R001C01, V100R001C10, V500R002C00, and V600R006C00. The vulnerability is due to insufficient input validation of SIP messages, allowing a remote attacker to trigger an out-of-bounds read [1].

Exploitation

An attacker with network access to the affected product can send specially crafted SIP messages to the SIP service. No authentication is required. The attacker crafts malicious SIP packets that exploit the insufficient input validation, causing the product to read beyond the intended buffer boundaries [1].

Impact

Successful exploitation causes some services to become abnormal. While the advisory does not specify the exact impact, an out-of-bounds read can lead to denial of service or potential information disclosure, depending on the memory layout [1].

Mitigation

Huawei has released software updates to fix this vulnerability. The resolved versions are: DP300 V500R002C00SPCb00, RP200 V500R002C00SPCb00 and V600R006C00SPCb00, TE30 V100R001C10SPCb00, V500R002C00SPCb00, and V600R006C00SPCb00, TE40 V500R002C00SPCb00 and V600R006C00SPCb00, TE50 V500R002C00SPCb00 and V600R006C00SPCb00, and TE60 V100R001C01SPCb00, V100R001C10SPCb00, V500R002C00SPCb00, and V600R006C00SPCb00. Users should upgrade to the fixed versions. The advisory is available at the Huawei PSIRT page [1]. No workarounds are documented, and this CVE is not listed on the CISA Known Exploited Vulnerabilities catalog.