BSA-2017-210
21631
03 August 2018
31 March 2017
Closed
High
7.5
N/A
CVE-2015-8948
Summary Security Advisory ID : BSA-2017-210
Component : libidn
Revision : 2.0: Final
idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read.
Products Confirmed Not Vulnerable
No Brocade Fibre Channel technology products from Broadcom are currently known to be affected by this vulnerability.
Workaround
There are no workarounds that address this vulnerability.
Revision History
| Version | Change | Date |
|---|---|---|
| 1.0 | Initial Publication | March 31, 2017 |
| 2.0 | Fabric OS update and update on Brocade Fiber Channel technology from Broadcom | August 3, 2018 |