Resource exhaustion in Brocade Fabric OS - CVE-2017-6227

Vulnerability identifier: #VU10448

CSH Severity: Low

CVSS v4: 7.1 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-6227

CWE-ID: CWE-400

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows an adjacent attacker to cause a DoS condition on the target system.

The weakness exists due to improper handling of Router Advertisement messages. An adjacent attacker can send specially crafted RA messages, consume excessive amounts of CPU resources and cause the system to hang.

Brocade Fabric OS
FOS Firmware

Update to versions 7.4.2b, 8.1.2, 8.2.0.

FOS Firmware - addressed in versions 7.4.2b, 8.1.2a

• http://www.brocade.com/content/dam/common/documents/content-types/security-bulletin/brocade-security-advisory-2018-526.htm

• Multiple vulnerabilities in Brocade Fabric OS
• Resource exhaustion in IBM FOS Firmware