buffer overflow vulnerability in “secpolicydelete” command
CVE-2023-31430

5.5MEDIUM

Key Information:

Vendor

Brocade
Status
Brocade Fabric Os
Vendor
CVE Published:
2 August 2023

What is CVE-2023-31430?

A buffer overflow vulnerability in “secpolicydelete” command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0 could allow an authenticated privileged user to crash the Brocade Fabric OS switch leading to a denial of service.

Affected Version(s)

Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0

References

https://support.broadcom.com/external/content/SecurityAdv...
https://security.netapp.com/advisory/ntap-20230908-0007/

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.