Brocade Fabric Operating System vulnerabilities

6 known vulnerabilities in Brocade Fabric Operating System from NetApp. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  OpenSSL: Missing Report of Error Condition

  CVE-2024-12797Feb 11, 2025OpenSSLEPSS 1.86%

  Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a server may fail to notice that the server was not authenticated, because handshakes don't abort as expected when the SSL_VERIFY_PEER verification mode is set. Impact summary: TLS and

• 9.8 Critical severity

  OpenSSL: Use After Free

  CVE-2024-4741Nov 13, 2024OpenSSLEPSS 3.28%

  Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause memory to be accessed that was previously freed in some situations Impact summary: A use after free can have a range of potential consequences such as the corruption of valid data, cras

• 8.8 High severity

  OpenSSL: Out-of-bounds Read

  CVE-2024-9143Oct 16, 2024OpenSSLEPSS 12.5%

  Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds memory reads or writes. Impact summary: Out of bound memory writes can lead to an application crash or even a poss

• 7.5 High severity

  OpenSSL: Access of Resource Using Incompatible Type

  CVE-2024-6119Sep 3, 2024OpenSSLEPSS 66.6%

  Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of

• 8.6 High severity

  curl: Missing Release of Resource after Effective Lifetime

  CVE-2024-2398Mar 27, 2024CurlEPSS 36.1%

  When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previ

• 9.8 Critical severity

  SIMATIC S7-1500 CPU 1518-4 PN/DP MFP…: Improper Access Control

  CVE-2023-28531Mar 17, 2023SiemensEPSS 2.99%

  ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9.