Huawei E5332 Webserver memory overflow vulnerability in CVE-2014-5327)

Huawei E5332 Webserver memory overflow vulnerability in CVE-2014-5327)

Release date:
Updated on:

Affected Systems:
Huawei E5332 21.344.19.00.1080
Unaffected system:
Huawei E5332 21.344.27.00.1080
Description:
Bugtraq id: 70403
CVE (CAN) ID: CVE-2014-5327

Huawei E5332 Webserver is a wireless router product.

The memory overflow vulnerability exists in HTTP request messages parsed by the E5332 Webserver, which can cause device restart.

<* Source: Stefan Horlacher

Link: http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-373056.htm
*>

Suggestion:
Vendor patch:

Huawei
------
Huawei has released a Security Bulletin (hw-373056) and patches for this:
Hw-373056: Security Advisory-Memory Overflow Vulnerabilities on Huawei E5332 Webserver
Link: http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-373056.htm

Patch download: http://consumer.huawei.com/en/support/downloads/detail/index.htm? Id = 27921

This article permanently updates the link address: