BSA-2017-213
21630
03 August 2018
31 March 2017
Closed
High
7.5
N/A
CVE-2016-6262
Summary
Security Advisory ID : BSA-2017-213
Component : libidn
Revision : 2.0: Final
idn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read, a different vulnerability than CVE-2015-8948.
Products Confirmed Not Vulnerable
No Brocade Fibre Channel technology products from Broadcom are currently known to be affected by this vulnerability.
Workaround
There are no workarounds that address this vulnerability.
Revision History
| Version | Change | Date |
|---|---|---|
| 1.0 | Initial Publication | March 31, 2017 |
| 2.0 | Fabric OS update and update to reflect Brocade Fiber Channel only. | August 3, 2018 |