PT-2014-3349 · Brocade · Brocade Routers

Publicado 2014-01-23 · Atualizado 2014-01-23 · CVE-2013-7306

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Média

Vetor base

AV:A/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Brocade routers (affected versions not specified)

Description The OSPF implementation does not account for duplicate Link State ID values in Link State Advertisement (LSA) packets, allowing remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2013-7306

Produtos afetados

Brocade Routers

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-7306 · Nota de Segurança
• http://kb.cert.org/vuls/id/229804 · Nota
• http://kb.cert.org/vuls/id/BLUU-98MS25 · Nota