安全预警 - 华为产品的H323协议中存在输入校验安全漏洞
- 预警编号：huawei-sa-20171206-01-h323
- 初始发布时间： 2017-12-06
- 更新发布时间： 2020-09-02
此漏洞的CVE编号为: CVE-2017-17151.
华为已发布版本修复该漏洞。安全预警链接：
http://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20171206-01-h323-cn
|
产品名称 |
版本号 |
修复版本号 |
|
AR100 |
V200R008C20SPC700 |
AR3200 V200R009C00 |
|
V200R008C20SPC700PWE |
||
|
V200R008C20SPC800 |
||
|
V200R008C20SPC800PWE |
||
|
V200R008C30 |
||
|
AR100-S |
V200R007C00SPCa00 |
AR3200 V200R009C00 |
|
V200R007C00SPCb00 |
||
|
V200R008C20 |
||
|
V200R008C20SPC700 |
||
|
V200R008C20SPC800 |
||
|
V200R008C20SPC800PWE |
||
|
V200R008C30 |
||
|
AR110-S |
V200R007C00SPC600 |
AR3200 V200R009C00 |
|
V200R007C00SPC900 |
||
|
V200R007C00SPCb00 |
||
|
V200R008C20SPC800 |
||
|
V200R008C30 |
||
|
AR120 |
V200R006C10 |
AR3200 V200R009C00 |
|
V200R006C10SPC300 |
||
|
V200R006C10SPC300PWE |
||
|
V200R007C00 |
||
|
V200R007C00PWE |
||
|
V200R007C00SPC100 |
||
|
V200R007C00SPC200 |
||
|
V200R007C00SPC600 |
||
|
V200R007C00SPC600PWE |
||
|
V200R007C00SPC900 |
||
|
V200R007C00SPC900PWE |
||
|
V200R007C00SPCb00 |
||
|
V200R007C00SPCb00PWE |
||
|
V200R007C01 |
||
|
V200R008C20 |
||
|
V200R008C20SPC700 |
||
|
V200R008C20SPC800 |
||
|
V200R008C30 |
||
|
AR120-S |
V200R006C10 |
AR3200 V200R009C00 |
|
V200R006C10SPC300 |
||
|
V200R007C00 |
||
|
V200R007C00SPC100 |
||
|
V200R007C00SPC200 |
||
|
V200R007C00SPC600 |
||
|
V200R007C00SPC900 |
||
|
V200R007C00SPCa00 |
||
|
V200R007C00SPCb00 |
||
|
V200R008C20 |
||
|
V200R008C20SPC700 |
||
|
V200R008C20SPC800 |
||
|
V200R008C30 |
||
|
AR1200 |
V200R006C10 |
AR3200 V200R009C00 |
|
V200R006C10PWE |
||
|
V200R006C10SPC030 |
||
|
V200R006C10SPC300 |
||
|
V200R006C10SPC300PWE |
||
|
V200R006C10SPC600 |
||
|
V200R006C13 |
||
|
V200R007C00 |
||
|
V200R007C00PWE |
||
|
V200R007C00SPC100 |
||
|
V200R007C00SPC200 |
||
|
V200R007C00SPC600 |
||
|
V200R007C00SPC600PWE |
||
|
V200R007C00SPC900 |
||
|
V200R007C00SPC900PWE |
||
|
V200R007C00SPCa00 |
||
|
V200R007C00SPCb00 |
||
|
V200R007C00SPCb00PWE |
||
|
V200R007C01 |
||
|
V200R007C02 |
||
|
V200R008C20 |
||
|
V200R008C20SPC600 |
||
|
V200R008C20SPC700 |
||
|
V200R008C20SPC800 |
||
|
V200R008C30 |
||
|
AR1200-S |
V200R006C10 |
AR3200 V200R009C00 |
|
V200R006C10SPC300 |
||
|
V200R007C00 |
||
|
V200R007C00SPC100 |
||
|
V200R007C00SPC200 |
||
|
V200R007C00SPC600 |
||
|
V200R007C00SPC900 |
||
|
V200R007C00SPCb00 |
||
|
V200R008C20 |
||
|
V200R008C20SPC700 |
||
|
V200R008C20SPC800 |
||
|
V200R008C20SPC800PWE |
||
|
V200R008C30 |
||
|
AR150 |
V200R006C10 |
AR3200 V200R009C00 |
|
V200R006C10PWE |
||
|
V200R006C10SPC300 |
||
|
V200R006C10SPC300PWE |
||
|
V200R007C00 |
||
|
V200R007C00PWE |
||
|
V200R007C00SPC100 |
||
|
V200R007C00SPC200 |
||
|
V200R007C00SPC600 |
||
|
V200R007C00SPC600PWE |
||
|
V200R007C00SPC900 |
||
|
V200R007C00SPC900PWE |
||
|
V200R007C00SPCb00 |
||
|
V200R007C00SPCb00PWE |
||
|
V200R007C01 |
||
|
V200R007C02 |
||
|
V200R007C02PWE |
||
|
V200R008C20 |
||
|
V200R008C20SPC700 |
||
|
V200R008C20SPC800 |
||
|
V200R008C30 |
||
|
AR150-S |
V200R006C10SPC300 |
AR3200 V200R009C00 |
|
V200R007C00 |
||
|
V200R007C00SPC100 |
||
|
V200R007C00SPC200 |
||
|
V200R007C00SPC600 |
||
|
V200R007C00SPC900 |
||
|
V200R007C00SPCb00 |
||
|
V200R008C20 |
||
|
V200R008C20SPC700 |
||
|
V200R008C20SPC800 |
||
|
V200R008C30 |
||
|
AR160 |
V200R006C10 |
AR3200 V200R009C00 |
|
V200R006C10PWE |
||
|
V200R006C10SPC100 |
||
|
V200R006C10SPC200 |
||
|
V200R006C10SPC300 |
||
|
V200R006C10SPC300PWE |
||
|
V200R006C10SPC600 |
||
|
V200R006C12 |
||
|
V200R007C00 |
||
|
V200R007C00PWE |
||
|
V200R007C00SPC100 |
||
|
V200R007C00SPC200 |
||
|
V200R007C00SPC500 |
||
|
V200R007C00SPC600 |
||
|
V200R007C00SPC600PWE |
||
|
V200R007C00SPC900 |
||
|
V200R007C00SPC900PWE |
||
|
V200R007C00SPCb00 |
||
|
V200R007C00SPCb00PWE |
||
|
V200R007C01 |
||
|
V200R007C02 |
||
|
V200R008C20 |
||
|
V200R008C20SPC500T |
||
|
V200R008C20SPC501T |
||
|
V200R008C20SPC600 |
||
|
V200R008C20SPC700 |
||
|
V200R008C20SPC800 |
||
|
V200R008C30 |
||
|
V200R008C30SPC100 |
||
|
AR200 |
V200R006C10 |
AR3200 V200R009C00 |
|
V200R006C10PWE |
||
|
V200R006C10SPC100 |
||
|
V200R006C10SPC300 |
||
|
V200R006C10SPC300PWE |
||
|
V200R007C00 |
||
|
V200R007C00PWE |
||
|
V200R007C00SPC100 |
||
|
V200R007C00SPC200 |
||
|
V200R007C00SPC600 |
||
|
V200R007C00SPC600PWE |
||
|
V200R007C00SPC900 |
||
|
V200R007C00SPC900PWE |
||
|
V200R007C00SPCb00 |
||
|
V200R007C00SPCb00PWE |
||
|
V200R007C01 |
||
|
V200R008C20 |
||
|
V200R008C20SPC600 |
||
|
V200R008C20SPC700 |
||
|
V200R008C20SPC800 |
||
|
V200R008C20SPC900 |
||
|
V200R008C20SPC900PWE |
||
|
V200R008C30 |
||
|
AR200-S |
V200R006C10 |
AR3200 V200R009C00 |
|
V200R006C10SPC300 |
||
|
V200R007C00 |
||
|
V200R007C00SPC100 |
||
|
V200R007C00SPC200 |
||
|
V200R007C00SPC600 |
||
|
V200R007C00SPC900 |
||
|
V200R007C00SPCb00 |
||
|
V200R008C20 |
||
|
V200R008C20SPC700 |
||
|
V200R008C20SPC800 |
||
|
V200R008C30 |
||
|
AR2200 |
V200R006C10 |
AR3200 V200R009C00 |
|
V200R006C10PWE |
||
|
V200R006C10SPC300 |
||
|
V200R006C10SPC300PWE |
||
|
V200R006C10SPC600 |
||
|
V200R006C13 |
||
|
V200R006C16PWE |
||
|
V200R007C00 |
||
|
V200R007C00PWE |
||
|
V200R007C00SPC100 |
||
|
V200R007C00SPC200 |
||
|
V200R007C00SPC500 |
||
|
V200R007C00SPC600 |
||
|
V200R007C00SPC600PWE |
||
|
V200R007C00SPC900 |
||
|
V200R007C00SPC900PWE |
||
|
V200R007C00SPCa00 |
||
|
V200R007C00SPCb00 |
||
|
V200R007C00SPCb00PWE |
||
|
V200R007C01 |
||
|
V200R007C02 |
||
|
V200R008C20 |
||
|
V200R008C20SPC600 |
||
|
V200R008C20SPC700 |
||
|
V200R008C20SPC800 |
||
|
V200R008C30 |
||
|
AR2200-S |
V200R006C10 |
AR3200 V200R009C00 |
|
V200R006C10SPC300 |
||
|
V200R007C00 |
||
|
V200R007C00SPC100 |
||
|
V200R007C00SPC200 |
||
|
V200R007C00SPC600 |
||
|
V200R007C00SPC900 |
||
|
V200R007C00SPCb00 |
||
|
V200R008C20 |
||
|
V200R008C20SPC700 |
||
|
V200R008C20SPC800 |
||
|
V200R008C20SPC800PWE |
||
|
V200R008C30 |
||
|
AR3200 |
V200R006C10 |
V200R009C00 |
|
V200R006C10PWE |
||
|
V200R006C10SPC100 |
||
|
V200R006C10SPC200 |
||
|
V200R006C10SPC300 |
||
|
V200R006C10SPC300PWE |
||
|
V200R006C10SPC600 |
||
|
V200R006C11 |
||
|
V200R007C00 |
||
|
V200R007C00PWE |
||
|
V200R007C00SPC100 |
||
|
V200R007C00SPC200 |
||
|
V200R007C00SPC500 |
||
|
V200R007C00SPC510T |
||
|
V200R007C00SPC600 |
||
|
V200R007C00SPC600PWE |
||
|
V200R007C00SPC900 |
||
|
V200R007C00SPC900PWE |
||
|
V200R007C00SPCa00 |
||
|
V200R007C00SPCb00 |
||
|
V200R007C00SPCb00PWE |
||
|
V200R007C00SPCc00 |
||
|
V200R007C01 |
||
|
V200R007C02 |
||
|
V200R008C00 |
||
|
V200R008C10 |
||
|
V200R008C20 |
||
|
V200R008C20B560 |
||
|
V200R008C20B570 |
||
|
V200R008C20B580 |
||
|
V200R008C20SPC700 |
||
|
V200R008C20SPC800 |
||
|
V200R008C30 |
||
|
V200R008C30B010 |
||
|
V200R008C30B020 |
||
|
V200R008C30B030 |
||
|
V200R008C30B050 |
||
|
V200R008C30B060 |
||
|
V200R008C30B070 |
||
|
V200R008C30B080 |
||
|
V200R008C30SPC067T |
||
|
AR3600 |
V200R006C10 |
AR3200 V200R009C00 |
|
V200R006C10PWE |
||
|
V200R006C10SPC100 |
||
|
V200R006C10SPC300 |
||
|
V200R006C10SPC300PWE |
||
|
V200R007C00 |
||
|
V200R007C00PWE |
||
|
V200R007C00SPC100 |
||
|
V200R007C00SPC200 |
||
|
V200R007C00SPC600 |
||
|
V200R007C00SPC600PWE |
||
|
V200R007C00SPC900 |
||
|
V200R007C00SPC900PWE |
||
|
V200R007C00SPCb00 |
||
|
V200R007C00SPCb00PWE |
||
|
V200R007C01 |
||
|
V200R008C20 |
||
|
AR510 |
V200R006C10 |
AR3200 V200R009C00 |
|
V200R006C10PWE |
||
|
V200R006C10SPC200 |
||
|
V200R006C12 |
||
|
V200R006C13 |
||
|
V200R006C15 |
||
|
V200R006C16 |
||
|
V200R006C17 |
||
|
V200R007C00SPC180T |
||
|
V200R007C00SPC600 |
||
|
V200R007C00SPC900 |
||
|
V200R007C00SPCb00 |
||
|
V200R008C20 |
||
|
V200R008C30 |
||
|
DP300 |
V500R002C00 |
V500R002C00SPCb00 |
|
V500R002C00SPC100 |
||
|
V500R002C00SPC200 |
||
|
V500R002C00SPC300 |
||
|
V500R002C00SPC400 |
||
|
V500R002C00SPC500 |
||
|
V500R002C00SPC600 |
||
|
V500R002C00SPC800 |
||
|
V500R002C00SPC900 |
||
|
NetEngine16EX |
V200R006C10 |
AR3200 V200R009C00 |
|
V200R006C10SPC300 |
||
|
V200R007C00 |
||
|
V200R007C00SPC100 |
||
|
V200R007C00SPC200 |
||
|
V200R007C00SPC600 |
||
|
V200R007C00SPC900 |
||
|
V200R007C00SPCb00 |
||
|
V200R008C20 |
||
|
V200R008C20SPC700 |
||
|
V200R008C20SPC800 |
||
|
V200R008C30 |
||
|
RP200 |
V500R002C00SPC200 |
TE60 V600R006C00SPC500 |
|
SRG1300 |
V200R006C10 |
AR3200 V200R009C00 |
|
V200R006C10SPC300 |
||
|
V200R007C00 |
||
|
V200R007C00SPC100 |
||
|
V200R007C00SPC200 |
||
|
V200R007C00SPC600 |
||
|
V200R007C00SPC900 |
||
|
V200R007C00SPCb00 |
||
|
V200R007C02 |
||
|
V200R008C20 |
||
|
V200R008C30 |
||
|
SRG2300 |
V200R006C10 |
AR3200 V200R009C00 |
|
V200R006C10SPC300 |
||
|
V200R007C00 |
||
|
V200R007C00SPC100 |
||
|
V200R007C00SPC200 |
||
|
V200R007C00SPC600 |
||
|
V200R007C00SPC900 |
||
|
V200R007C00SPCb00 |
||
|
V200R007C02 |
||
|
V200R008C20 |
||
|
V200R008C30 |
||
|
SRG3300 |
V200R006C10 |
AR3200 V200R009C00 |
|
V200R006C10SPC300 |
||
|
V200R007C00 |
||
|
V200R007C00SPC100 |
||
|
V200R007C00SPC200 |
||
|
V200R007C00SPC600 |
||
|
V200R007C00SPC900 |
||
|
V200R007C00SPCb00 |
||
|
V200R008C20 |
||
|
V200R008C30 |
||
|
TE30 |
V100R001C02SPC100 |
TE60 V600R006C00SPC500 |
|
V100R001C02SPC200 |
||
|
V100R001C10 |
||
|
V100R001C10SPC100 |
||
|
V100R001C10SPC300 |
||
|
V100R001C10SPC600 |
||
|
V100R001C10SPC800 |
||
|
V500R002C00SPC200 |
||
|
V500R002C00SPC600 |
||
|
V500R002C00SPC700 |
||
|
V500R002C00SPC900 |
||
|
V500R002C00SPCb00 |
||
|
TE40 |
V500R002C00SPC600 |
TE60 V600R006C00SPC500 |
|
V500R002C00SPC700 |
||
|
V500R002C00SPC900 |
||
|
V500R002C00SPCb00 |
||
|
V600R006C00 |
||
|
TE50 |
V500R002C00SPC600 |
TE60 V600R006C00SPC500 |
|
V500R002C00SPC700 |
||
|
V500R002C00SPCb00 |
||
|
TE60 |
V100R001C01SPC100 |
V600R006C00SPC500 |
|
V100R001C10 |
||
|
V100R001C10B010 |
||
|
V100R001C10SPC300 |
||
|
V100R001C10SPC400 |
||
|
V100R001C10SPC502T |
||
|
V100R001C10SPC600 |
||
|
V100R001C10SPC700 |
||
|
V100R001C10SPC800 |
||
|
V100R001C10SPC900 |
||
|
V500R002C00 |
||
|
V500R002C00SPC100 |
||
|
V500R002C00SPC200 |
||
|
V500R002C00SPC600 |
||
|
V500R002C00SPC700 |
||
|
V500R002C00SPC800 |
||
|
V500R002C00SPC900 |
||
|
V500R002C00SPCa00 |
||
|
V500R002C00SPCb00 |
||
|
V600R006C00 |
||
|
TP3106 |
V100R001C06B020 |
TP3206 V100R002C00SPC800 |
|
V100R002C00 |
||
|
V100R002C00B026 |
||
|
V100R002C00B027 |
||
|
V100R002C00B028 |
||
|
V100R002C00B029 |
||
|
V100R002C00SPC100B022 |
||
|
V100R002C00SPC100B022SP01 |
||
|
V100R002C00SPC100B023 |
||
|
V100R002C00SPC100B024 |
||
|
V100R002C00SPC100B025 |
||
|
V100R002C00SPC101T |
||
|
V100R002C00SPC200 |
||
|
V100R002C00SPC400 |
||
|
V100R002C00SPC600 |
||
|
V100R002C00T |
||
|
TP3206 |
V100R002C00 |
V100R002C00SPC800 |
|
V100R002C00SPC200 |
||
|
V100R002C00SPC400 |
||
|
V100R002C00SPC600 |
||
|
ViewPoint 8660 |
V100R008C03B013SP02 |
V100R008C03SPCe00 |
|
V100R008C03B013SP03 |
||
|
V100R008C03B013SP04 |
||
|
V100R008C03SPC100 |
||
|
V100R008C03SPC100B010 |
||
|
V100R008C03SPC100B011 |
||
|
V100R008C03SPC200 |
||
|
V100R008C03SPC200T |
||
|
V100R008C03SPC300 |
||
|
V100R008C03SPC400 |
||
|
V100R008C03SPC500 |
||
|
V100R008C03SPC600 |
||
|
V100R008C03SPC600T |
||
|
V100R008C03SPC700 |
||
|
V100R008C03SPC800 |
||
|
V100R008C03SPC900 |
||
|
V100R008C03SPCa00 |
||
|
V100R008C03SPCb00 |
||
|
V100R008C03SPCc00 |
||
|
ViewPoint 9030 |
V100R011C02SPC100 |
TP3206 V100R002C00SPC800 |
|
V100R011C02SPC100B010 |
||
|
V100R011C03B012SP15 |
||
|
V100R011C03B012SP16 |
||
|
V100R011C03B015SP03 |
||
|
V100R011C03LGWL01SPC100 |
||
|
V100R011C03LGWL01SPC100B012 |
||
|
V100R011C03SPC100 |
||
|
V100R011C03SPC100B010 |
||
|
V100R011C03SPC100B011 |
||
|
V100R011C03SPC100B012 |
||
|
V100R011C03SPC200 |
||
|
V100R011C03SPC300 |
||
|
V100R011C03SPC400 |
||
|
V100R011C03SPC500 |
攻击者成功利用此漏洞发送恶意报文导致DOS攻击。
漏洞使用CVSSv3计分系统进行分级（http://www.first.org/cvss/specification-document）
基础得分：5.9 (AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
临时得分：5.5 (E:F/RL:O/RC:C)
利用漏洞发起攻击的预置条件：
攻击者接入受影响产品网络并构造恶意报文
漏洞详细描述：
华为部分产品中存在一个输入校验不当的安全漏洞。由于报文检验不足，没有经过认证的攻击者可以利用这个漏洞，发送特殊的H323报文。 攻击者成功利用这个漏洞，构造恶意报文造成DOS攻击。
无
用户可以通过华为TAC (Huawei Technical Assistance Center)获取补丁/更新版本。
TAC的联系方式见链接http://www.huawei.com/cn/psirt/report-vulnerabilities。
该漏洞由华为内部测试发现。
2020-09-02 V1.1 UPDATE UPDATED 刷新摘要和受影响产品版本和修复信息;
2017-12-06 V1.0 INITIAL
无
华为一贯主张尽全力保障产品用户的最终利益，遵循负责任的安全事件披露原则，并通过产品安全问题处理机制处理产品安全问题。
获取华为公司安全应急响应服务及华为产品漏洞信息，请访问http://www.huawei.com/cn/psirt。
反馈华为产品和解决方案安全问题,请反馈至华为PSIRT邮箱PSIRT@huawei.com，详情参考http://www.huawei.com/cn/psirt/report-vulnerabilities。
