Summary 

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.) 

Products Affected

• Brocade Fabric OS versions 10.0.0 through 10.0.1
  
  Security Exposure Note: Outbound client operations on a Brocade Fabric OS switch require manual initiation by an authenticated administrator; an unauthenticated network attacker cannot force the FOS switch to initiate an outbound SSH connection. To mitigate risk for instances when the Fabric OS acts as an SSH client (such as during supportsave, configupload, or firmwareupgrade operations), SAN administrators should strictly configure IP filters and restrict destination IP targets to trusted, internal management servers.

Products Not Affected

• Brocade Fabric OS versions before 10.0.0
  [VEX Justification: Vulnerable_code_not_present]
• Brocade SANnav
  [VEX Justification: Vulnerable_code_not_in_execute_path]
• Brocade ASCG
  [VEX Justification: Vulnerable_code_not_in_execute_path]

Solution

• While not exploitable, a security update is provided in Brocade SANnav 3.0.1a

Revision History

Disclaimer

THIS DOCUMENT IS PROVIDED ON AN AS-IS BASIS SOLELY FOR INFORMATIONAL PURPOSES AND DOES NOT IMPLY ANY KIND OF GUARANTY OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. YOUR USE OF THE INFORMATION CONTAINED HEREIN IS AT YOUR OWN RISK. ALL INFORMATION PROVIDED HEREIN IS BASED ON BROCADE'S CURRENT KNOWLEDGE AND UNDERSTANDING OF THE VULNERABILITY AND IMPACT TO BROCADE HARDWARE AND SOFTWARE PRODUCTS. BROCADE RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.