PT-2014-3350 · Brocade · Brocade Vyatta Vrouter

Publicado 2014-01-23 · Atualizado 2014-01-23 · CVE-2013-7307

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Média

Vetor base

AV:A/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Brocade Vyatta vRouter versions prior to 6.6R1

Description The OSPF implementation does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database. This allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet.

Recommendations For versions prior to 6.6R1, update to version 6.6R1 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2013-7307

Produtos afetados

Brocade Vyatta Vrouter

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-7307 · Nota de Segurança
• http://kb.cert.org/vuls/id/BLUU-97KQ2C · Nota
• http://kb.cert.org/vuls/id/229804 · Nota