{ "CVE_data_meta" : { "ASSIGNER" : "psirt@huawei.com", "ID" : "CVE-2017-15342", "STATE" : "PUBLIC" }, "affects" : { "vendor" : { "vendor_data" : [ { "product" : { "product_data" : [ { "product_name" : "DP300,TE60,TP3106,eSpace U1981", "version" : { "version_data" : [ { "version_value" : "DP300 V500R002C00, TE60 V600R006C00, TP3106 V100R002C00, eSpace U1981 V200R003C30SPC100" } ] } } ] }, "vendor_name" : "Huawei Technologies Co., Ltd." } ] } }, "data_format" : "MITRE", "data_type" : "CVE", "data_version" : "4.0", "description" : { "description_data" : [ { "lang" : "eng", "value" : "Huawei DP300 V500R002C00, TE60 V600R006C00, TP3106 V100R002C00, eSpace U1981 V200R003C30SPC100 have a denial of service vulnerability. The software does not correctly calculate the rest size in a buffer when handling SSL connections. A remote unauthenticated attacker could send a lot of crafted SSL messages to the device, successful exploit could cause no space in the buffer and then denial of service." } ] }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "eng", "value" : "DoS" } ] } ] }, "references" : { "reference_data" : [ { "name" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-ssl-en", "refsource" : "CONFIRM", "url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-ssl-en" } ] } }