CveMateVulnerability intelligence

Broadcom Brocade Fabric Operating System vulnerabilities

37 vulnerabilities

Known vulnerabilities in Broadcom Brocade Fabric Operating System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2021-40438apache software foundationapache http server+101KEVRansomware5y ago16-09-2021 14:40

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.CVE-2021-20197broadcombrocade_fabric_operating_system_firmware+75y ago26-03-2021 16:47

There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these utilities are run as a privileged user (presumably as part of a script updating binaries across different users), an unprivileged user can trick these utilities into getting ownership of arbitrary files through a symlink.CVE-2021-31879broadcombrocade_fabric_operating_system_firmware+115y ago29-04-2021 03:03

GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007.CVE-2021-36160apache software foundationapache http server+175y ago16-09-2021 14:40

A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).CVE-2021-4197broadcombrocade_fabric_operating_system_firmware+784y ago23-03-2022 19:46

An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found in the way users have access to some less privileged process that are controlled by cgroups and have higher privileged parent process. It is actually both for cgroup2 and cgroup1 versions of control groups. A local user could use this flaw to crash the system or escalate their privileges on the system.CVE-2021-27218alpineglib+205y ago15-02-2021 16:27

An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 2**32, causing unintended length truncation.CVE-2021-27219alpineglib+205y ago15-02-2021 16:27

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption.CVE-2021-28153alpineglib+455y ago11-03-2021 21:04

An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is attacker-controlled. (If the path is a symlink to a file that already exists, then the contents of that file correctly remain unchanged.)CVE-2021-34798apache software foundationapache http server+195y ago16-09-2021 14:40

Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.CVE-2021-23133broadcombrocade_fabric_operating_system_firmware+755y ago22-04-2021 18:00

A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctp_destroy_sock is called without sock_net(sk)->sctp.addr_wq_lock then an element is removed from the auto_asconf_splist list without any proper locking. This can be exploited by an attacker with network service privileges to escalate to root or from the context of an unprivileged user directly if a BPF_CGROUP_INET_SOCK_CREATE is attached which denies creation of some SCTP socket.CVE-2020-1927apacheapache_http_server+176y ago01-04-2020 23:08

In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within the request URL.CVE-2020-15436broadcombrocade_fabric_operating_system_firmware+655y ago23-11-2020 20:08

Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field.CVE-2020-12243alpineopenldap+566y ago28-04-2020 18:07

In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).CVE-2020-8648broadcombrocade_fabric_operating_system_firmware+456y ago06-02-2020 00:06

There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c.CVE-2020-35496broadcombrocade_fabric_operating_system_firmware+95y ago04-01-2021 14:24

There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability. This flaw affects binutils versions prior to 2.34.CVE-2020-35494broadcombrocade_fabric_operating_system_firmware+95y ago04-01-2021 14:23

There's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted input file to be processed by binutils could cause usage of uninitialized memory. The highest threat is to application availability with a lower threat to data confidentiality. This flaw affects binutils versions prior to 2.34.CVE-2020-35507broadcombrocade_fabric_operating_system_firmware+95y ago04-01-2021 14:24

There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability.CVE-2020-35493broadcombrocade_fabric_operating_system_firmware+95y ago04-01-2021 14:22

A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap buffer overflow -> out-of-bounds read that could lead to an impact to application availability. This flaw affects binutils versions prior to 2.34.CVE-2020-35495broadcombrocade_fabric_operating_system_firmware+95y ago04-01-2021 14:23

There's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to be processed by the objdump program could cause a null pointer dereference. The greatest threat from this flaw is to application availability. This flaw affects binutils versions prior to 2.34.CVE-2019-19044broadcombrocade_fabric_operating_system_firmware+296y ago18-11-2019 05:23

Two memory leaks in the v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c in the Linux kernel before 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering kcalloc() or v3d_job_init() failures, aka CID-29cd13cfd762.