Brocade Fabric Operating System
By the Year
In 2024 there have been 0 vulnerabilities in Brocade Fabric Operating System . Last year Fabric Operating System had 1 security vulnerability published. Right now, Fabric Operating System is on track to have less security vulnerabilities in 2024 than it did last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2024 | 0 | 0.00 |
| 2023 | 1 | 4.40 |
| 2022 | 5 | 7.52 |
| 2021 | 1 | 7.80 |
| 2020 | 3 | 6.00 |
| 2019 | 0 | 0.00 |
| 2018 | 0 | 0.00 |
It may take a day or so for new Fabric Operating System vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Brocade Fabric Operating System Security Vulnerabilities
A
segmentation fault
CVE-2023-4162
4.4 - Medium
- August 31, 2023
A segmentation fault can occur in Brocade Fabric OS after Brocade Fabric OS v9.0 and before Brocade Fabric OS v9.2.0a through the passwdcfg command. This could allow an authenticated privileged user local user to crash a Brocade Fabric OS swith using the cli passwdcfg --set -expire -minDiff.
Resource Exhaustion
A vulnerability in Brocade Fabric OS software v9.1.1, v9.0.1e, v8.2.3c, v7.4.2j, and earlier versions could
CVE-2022-33186
9.8 - Critical
- December 08, 2022
A vulnerability in Brocade Fabric OS software v9.1.1, v9.0.1e, v8.2.3c, v7.4.2j, and earlier versions could allow a remote unauthenticated attacker to execute on a Brocade Fabric OS switch commands capable of modifying zoning, disabling the switch, disabling ports, and modifying the switch IP address.
Shell injection
A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.
CVE-2022-27776
6.5 - Medium
- June 02, 2022
A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.
Insufficiently Protected Credentials
An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable
CVE-2022-27775
7.5 - High
- June 02, 2022
An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.
An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected
CVE-2022-27774
5.7 - Medium
- June 02, 2022
An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is used with authentication could leak credentials to other services that exist on different protocols or port numbers.
Insufficiently Protected Credentials
An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure
CVE-2022-22576
8.1 - High
- May 26, 2022
An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S) and LDAP(S) (openldap only).
Missing Authentication for Critical Function
A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c
CVE-2021-22555
7.8 - High
- July 07, 2021
A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space
Memory Corruption
ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference
CVE-2020-13632
5.5 - Medium
- May 27, 2020
ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.
NULL Pointer Dereference
SQLite before 3.32.0
CVE-2020-13631
5.5 - Medium
- May 27, 2020
SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.
ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow
CVE-2020-13630
7 - High
- May 27, 2020
ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.
Dangling pointer
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Oracle Zfs Storage Appliance Kit or by Brocade? Click the Watch button to subscribe.
