CVE-2026-87676: Buffer Overflow
A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier (AKI) extension before copying string tokens into an internal memory buffer. An authenticated user with administrative privileges to import custom certificates can supply a certificate containing an intentionally oversized AKI extension. When the system processes or renders the certificate attributes, this can trigger a stack memory corruption leading to a denial-of-service (DoS) condition by crashing the management daemon.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Brocade Fabric OSto a version that resolves this vulnerability.Fixed in 10.0.1
Event History
Frequently Asked Questions
Which systems are affected?
Brocade Fabric OS versions before 10.0.1 are affected. Systems running 10.0.1 or later are not identified as affected by the provided information.
What access does an attacker need?
An attacker must be authenticated with administrative privileges that allow importing custom certificates. Exploitation requires supplying a crafted X.509 PEM certificate with an oversized Authority Key Identifier extension.
What is the expected impact of successful exploitation?
Processing or rendering the crafted certificate’s attributes can corrupt stack memory and crash the management daemon. The described impact is denial of service affecting management functionality.
What should be done if the affected version cannot be updated immediately?
Restrict custom certificate import privileges to only trusted administrators and avoid importing untrusted X.509 PEM certificates. Upgrade Brocade Fabric OS to version 10.0.1 or later when possible.