CVE-2026-87684: Buffer Overflow
A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly validating the length of the string. A remote, unauthenticated attacker (under default configuration) can exploit this vulnerability by sending a specially crafted SNMPv3 packet, leading to memory corruption, daemon crash (Denial of Service), or potential arbitrary code execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Brocade Fabric OSto a version that resolves this vulnerability.Fixed in 10.0.1
Event History
Frequently Asked Questions
Which Brocade Fabric releases need to be remediated?
Brocade Fabric versions before 10.0.1 are affected. Upgrade to 10.0.1 or later.
Is an attacker required to authenticate or rely on a non-default SNMP configuration?
No. The vulnerability is exploitable remotely without authentication under the default configuration by sending a specially crafted SNMPv3 packet.
What could exploitation cause?
Successful exploitation can corrupt memory in the SNMP daemon, causing a daemon crash and denial of service. The advisory also identifies potential arbitrary code execution.