Lucene search

K
broadcomBroadcom Security ResponseBSNSA22352
HistoryAug 01, 2023 - 12:00 a.m.

net ipv4 route.c has an information leak because the hash table is very small

2023-08-0100:00:00
Broadcom Security Response
support.broadcom.com
14

5.3 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.5%

In the IPv4 implementation in the Linux kernel before 5.12.4,
net/ipv4/route.c has an information leak because the hash table is very small.

Impact: Successful exploitation of this vulnerability could lead to disclosure
of sensitive information.

Products Affected

Brocade Fabric OS v9.0 and later versions

Brocade ASCG OVA versions prior to v3.0

Products Confirmed Not Affected

Brocade Fabric OS versions prior to v9.0 are not affected by this vulnerability

Brocade SANnav is not affected by this vulnerability

Solution

Solution provided in Brocade Fabric OS v9.1.1c, v9.2.0 and later versions

Solution provided in Brocade ASCG v3.0 and later versions