Latest broadcom brocade fabric operating system Vulnerabilities

● CVE-2023-31927

An information disclosure in the web interface of Brocade Fabric OS versions before Brocade Fabric OS v9.2.0 and v9.1.1c, could allow a remote unauthenticated attacker to get technical details about t...

Broadcom Brocade Fabric Operating System<9.1.1c

● CVE-2023-31926

System files could be overwritten using the less command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0.

Broadcom Brocade Fabric Operating System<9.1.1c

● CVE-2023-31428

Brocade Fabric OS before Brocade Fabric OS v9.1.1c, v9.2.0 contains a vulnerability in the command line that could allow a local user to dump files under user's home directory using grep.

Broadcom Brocade Fabric Operating System<9.1.1c

Broadcom Brocade Fabric Operating System=9.2.0

● CVE-2023-31928

A reflected cross-site scripting (XSS) vulnerability exists in Brocade Webtools PortSetting.html of Brocade Fabric OS version before Brocade Fabric OS v9.2.0 that could allow a remote unauthenticate...

Broadcom Brocade Fabric Operating System<9.2.0

● CVE-2023-31431

A buffer overflow vulnerability in “diagstatus” command in Brocade Fabric OS before Brocade Fabric v9.2.0 and v9.1.1c could allow an authenticated user to crash the Brocade Fabric OS switch leading to...

Broadcom Brocade Fabric Operating System<9.1.1c

Broadcom Brocade Fabric Operating System=9.2.0

● CVE-2023-31430

A buffer overflow vulnerability in “secpolicydelete” command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0 could allow an authenticated privileged user to crash the Brocade Fabric O...

Broadcom Brocade Fabric Operating System<9.1.1c

Broadcom Brocade Fabric Operating System=9.2.0

● CVE-2023-31432

Through manipulation of passwords or other variables, using commands such as portcfgupload, configupload, license, myid, a non-privileged user could obtain root privileges in Brocade Fabric OS version...

Broadcom Brocade Fabric Operating System<9.1.1c

Broadcom Brocade Fabric Operating System=9.2.0

● CVE-2021-23133

A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctp_dest...

redhat/kernel-rt<0:4.18.0-348.rt7.130.el8

redhat/kernel<0:4.18.0-348.el8

redhat/Kernel<5.12

ubuntu/linux<4.15.0-147.151

ubuntu/linux<5.4.0-77.86

ubuntu/linux<5.8.0-59.66

and 179 more

● CVE-2020-35507

GNU Binutils before 2.34 has a NULL pointer dereference in bfd_pef_parse_function_stubs function in bfd/pef.c due to not checking return value of bfd_malloc. This bug allows attackers to cause a denia...

redhat/binutils<2.34

GNU Binutils<2.34

Redhat Enterprise Linux=8.0

IBM Cloud Pak for Business Automation

Netapp Hci Compute Node

Netapp Cloud Backup

and 4 more

● CVE-2020-12243

In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).

Apple macOS Catalina<10.15.6

Apple Mojave

Apple High Sierra

debian/openldap

ubuntu/openldap<2.4.50

ubuntu/openldap<2.4.45+dfsg-1ubuntu1.5

and 87 more

● CVE-2020-1927

In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL ...

redhat/jbcs-httpd24-apr<0:1.6.3-86.jbcs.el6

redhat/jbcs-httpd24-brotli<0:1.0.6-21.jbcs.el6

redhat/jbcs-httpd24-httpd<0:2.4.37-52.jbcs.el6

redhat/jbcs-httpd24-openssl<1:1.1.1c-16.jbcs.el6

redhat/jbcs-httpd24-apr<0:1.6.3-86.jbcs.el7

redhat/jbcs-httpd24-brotli<0:1.0.6-21.jbcs.el7

and 59 more

Latest broadcom brocade fabric operating system Vulnerabilities

Company

Resources

Contact