Summary

Security Advisory ID : BSA-2021-1238

Component : Libgcrypt

Revision : 1.0

_gcry_md_block_write in cipher/hash-common.c in Libgcrypt version 1.9.0 has a heap-based buffer overflow when the digest final function sets a large count value. It is recommended to upgrade to 1.9.1 or later.

Products Confirmed Not Vulnerable
No Brocade Fibre Channel technology products from Broadcom are currently known to be affected by this vulnerability.

Note.
Brocade Manageability products are not vulnerable to this CVE. However, if a Brocade Manageability product is installed on the same Server vulnerable to this CVE, this is out of Brocade's control. Brocade recommends Customers apply recommendations provided by the Vendor.

Revision History

Version	Change	Date
1.0	Initial Publication	Feb 4, 2021