CVE-2017-8158

Published: Nov 22, 2017

Modified: Sep 16, 2024

PUBLISHED

Description

FusionCompute V100R005C00 and V100R005C10 have an improper authorization vulnerability due to improper permission settings for a certain file on the host machine. An authenticated attacker could create a large number of virtual machine (VM) processes to exhaust system resources. Successful exploit could make new VMs unavailable.

Vendor	Product	Versions
Huawei Technologies Co., Ltd.	FusionCompute	affected `V100R005C00 and V100R005C10`

References

http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170927-01-dos-en

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2017-8158

Description

Affected Products

References