PT-2016-7468 · Brocade · Brocade Netiron

Publicado 2016-10-31 · Atualizado 2017-07-29 · CVE-2016-8203

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Brocade NetIron OS versions 5.8.00 through 5.8.00e Brocade NetIron OS versions 5.9.00 through 5.9.00bd Brocade NetIron OS version 6.0.00 Brocade NetIron OS version 6.0.00a

Description A memory corruption issue in the IPsec code path could allow attackers to cause a denial of service, resulting in a line card reset, via certain constructed IPsec control packets.

Recommendations For Brocade NetIron OS versions 5.8.00 through 5.8.00e, update to a version outside of this range to resolve the issue. For Brocade NetIron OS versions 5.9.00 through 5.9.00bd, update to a version outside of this range to resolve the issue. For Brocade NetIron OS version 6.0.00, update to a version outside of this range to resolve the issue. For Brocade NetIron OS version 6.0.00a, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting IPsec control packet traffic to minimize the risk of exploitation.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2016-8203

Produtos afetados

Brocade Netiron

Referências · 5

• http://securitytracker.com/id/1037010 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-8203 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-8203 · Aviso do Fabricante
• http://brocade.com/en/backend-content/pdf-page.html?/content/dam/common/documents/content-types/security-bulletin/brocade-security-advisory-2016-168.pdf · Aviso do Fabricante
• http://securityfocus.com/bid/94232 · Nota