PT-2016-7468 · Brocade · Brocade Netiron

Published 2016-10-31 · Updated 2017-07-29 · CVE-2016-8203

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Brocade NetIron OS versions 5.8.00 through 5.8.00e Brocade NetIron OS versions 5.9.00 through 5.9.00bd Brocade NetIron OS version 6.0.00 Brocade NetIron OS version 6.0.00a

Description A memory corruption issue in the IPsec code path could allow attackers to cause a denial of service, resulting in a line card reset, via certain constructed IPsec control packets.

Recommendations For Brocade NetIron OS versions 5.8.00 through 5.8.00e, update to a version outside of this range to resolve the issue. For Brocade NetIron OS versions 5.9.00 through 5.9.00bd, update to a version outside of this range to resolve the issue. For Brocade NetIron OS version 6.0.00, update to a version outside of this range to resolve the issue. For Brocade NetIron OS version 6.0.00a, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting IPsec control packet traffic to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2016-8203

Affected Products

Brocade Netiron

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-8203 · Security Note
• https://osv.dev/vulnerability/CVE-2016-8203 · Vendor Advisory
• http://brocade.com/en/backend-content/pdf-page.html?/content/dam/common/documents/content-types/security-bulletin/brocade-security-advisory-2016-168.pdf · Vendor Advisory
• http://securitytracker.com/id/1037010 · Note
• http://securityfocus.com/bid/94232 · Note