CVE-2013-7306: Input Validation
The OSPF implementation on Brocade routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-7306?
CVE-2013-7306 has been classified as a high-severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2013-7306?
To mitigate CVE-2013-7306, update your Brocade router firmware to a version that addresses this vulnerability.
What types of devices are affected by CVE-2013-7306?
CVE-2013-7306 affects various Brocade devices, including the ADX, Bigiron RX, Fastiron, ICX, MLX, Netiron series, Turboiron, VDX, and Vyatta.
What can attackers achieve through CVE-2013-7306?
Attackers exploiting CVE-2013-7306 can cause a routing disruption or potentially access sensitive information from the affected router.
When was CVE-2013-7306 disclosed?
CVE-2013-7306 was disclosed in 2013, highlighting vulnerabilities in Brocade's OSPF implementation.