一、漏洞详情

Huawei IPS Module等都是中国华为（Huawei）公司的产品。Huawei IPS Module是一款入侵防御系统（IPS）模块。NGFW Module是一款下一代防火墙（NGFW）模块。Secospace USG6600是一款下一代防火墙产品。

多款Huawei产品存在内存泄露漏洞。由于产品在某些场景下对内存释放处理不当，远程攻击者可能会发送特定报文来触发该漏洞。成功利用该漏洞可能导致服务异常。

二、影响范围

Huawei USG9500 V500R001C30SPC200

Huawei USG9500 V500R001C30SPC600

Huawei USG9500 V500R001C60SPC500

Huawei USG9500 V500R005C00SPC100

Huawei USG9500 V500R005C00SPC200

Huawei Secospace USG6600 V500R001C60SPC500

Huawei Secospace USG6600 V500R001C30SPC600

Huawei Secospace USG6600 V500R001C30SPC200

Huawei Secospace USG6600 V500R005C00SPC100

Huawei IPS Module V500R005C00SPC100

Huawei IPS Module V500R005C00SPC200

Huawei NGFW Module V500R005C00SPC100

Huawei NGFW Module V500R005C00SPC200

Huawei Secospace USG6300 V500R001C30SPC200

Huawei Secospace USG6300 V500R001C30SPC600

Huawei Secospace USG6300 V500R001C60SPC500

Huawei Secospace USG6300 V500R005C00SPC100

Huawei Secospace USG6300 V500R005C00SPC200

Huawei Secospace USG6500 V500R001C30SPC200

Huawei Secospace USG6500 V500R001C30SPC600

Huawei Secospace USG6500 V500R001C60SPC500

Huawei Secospace USG6500 V500R005C00SPC100

Huawei Secospace USG6500 V500R005C00SPC200

三、修复建议

漏洞解决方案：https://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20210210-01-memoryleak-cn