CVE-2020-1829 Use after free in NIP6800

High 7.5 Published 17 Feb 2020 Updated 4 Aug 2024

Attackers can cause a double free memory error in the IPSec module, leading to a denial of service on Huawei network security devices.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2020-1829?

CVE-2020-1829 is a high-severity use after free vulnerability in Huawei Nip6800 Firmware, published on 17 Feb 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Huawei NIP6800 versions V500R001C30 and V500R001C60SPC500; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, and V500R001C60SPC500 have a vulnerability that the IPSec module handles a message improperly. Attackers can send specific message to cause double free memory. This may compromise normal service.

Weakness: CWE-415

Which versions are affected by CVE-2020-1829?

It affects 3 products.

Products include Huawei Nip6800 Firmware, Huawei Secospace Usg6600 Firmware, Huawei Usg9500 Firmware.

How do I fix CVE-2020-1829?

No fix has been published for CVE-2020-1829 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.

Is CVE-2020-1829 being exploited?

There is no known exploitation of CVE-2020-1829 in the wild and no public exploit code.

All Huawei Nip6800 Firmware vulnerabilities

Sources

Also known as GHSA-rcx8-6xcx-7vh9.