CVE-2017-8158

MEDIUM 6.5CVE-2017-8158 · Published 22/11/2017 · updated 17/06/2026

In short

CVE-2017-8158 is a MEDIUM (CVSS 6.5) vulnerability affecting fusioncompute (huawei).
Chance of exploitation in the next 30 days (EPSS): 0.20%, higher than 9.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
fusioncompute huawei	`= v100r005c00= v100r005c10`	No fix yet

Description

FusionCompute V100R005C00 and V100R005C10 have an improper authorization vulnerability due to improper permission settings for a certain file on the host machine. An authenticated attacker could create a large number of virtual machine (VM) processes to exhaust system resources. Successful exploit could make new VMs unavailable.

References

huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170927-01-dos-en · Vendor Advisory

More vulnerabilities in fusioncompute

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

fusioncompute

huawei

= v100r005c00= v100r005c10

No fix yet

Description

More vulnerabilities in fusioncompute

See all →