CVE-2020-15373 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Fabric OS

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer3 documents3 sources
Severity
9.8CRITICALNVD
EPSS
0.9%
top 23.92%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Brocade Fabric OSBroadcom Fabric Operating System
Timeline
PublishedSep 25
Latest updateMay 24

Description

Multiple buffer overflow vulnerabilities in REST API in Brocade Fabric OS versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c could allow remote unauthenticated attackers to perform various attacks.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5brocade/brocade_fabric_osBrocade Fabric OS versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c.

🔴Vulnerability Details

2
GHSA
GHSA-gjg4-p49j-8pwc: Multiple buffer overflow vulnerabilities in REST API in Brocade Fabric OS versions v8↗2022-05-24
▶
CVEList
CVE-2020-15373: Multiple buffer overflow vulnerabilities in REST API in Brocade Fabric OS versions v8↗2020-09-25
▶
CVE-2020-15373 — Brocade Fabric OS vulnerability | cvebase