Lucene search

K
broadcomBroadcom Security ResponseBSA-2021-1013
HistoryJul 10, 2021 - 12:00 a.m.

BSA-2021-1013

2021-07-1000:00:00
Broadcom Security Response
support.broadcom.com
28
telnet server
information disclosure
heap data corruption
arbitrary code execution
unauthenticated remote attacker
brocade fabric os
vulnerability
security update

AI Score

9.8

Confidence

High

EPSS

0.833

Percentile

98.5%

Security Advisory ID : BSA-2021-1013

Component : Telnet

Revision : 1.0: Final

**

A vulnerability was found where incorrect bounds checks in the telnet server’s (telnetd) handling of short writes and urgent data, could lead to information disclosure and corruption of heap data. An unauthenticated remote attacker could exploit these bugs by sending specially crafted telnet packets to achieve arbitrary code execution in the telnet server.

Affected Products

  • All Brocade Fabric OS Versions before v9.0.0a and Brocade Fabric OS versions v9.0.1 through v9.0.1d
  • Security update provided in Brocade Fabric OS: v9.1.0, v9.0.1e, v9.0.0a, v8.1.2k, v8.2.1e, v8.2.0_CBN3, v8.2.2c, v7.4.2h

****Security update provided inBrocade Fabric v9.0.0a, v8.1.2k, v8.2.1e, v8.2.0_CBN3, v8.2.2c, v7.4.2h