What is CVE-2023-31430?

CVE-2023-31430 is a medium-severity vulnerability in Broadcom Brocade_fabric_operating_system, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 5.5/10. Published 2023-08-02.

How severe is CVE-2023-31430?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Buffer overflow in Broadcom Brocade_fabric_operating_system

CVE-2023-31430

A buffer overflow vulnerability in “secpolicydelete” command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0 could allow an authenticated privileged user to crash the Brocade Fabric OS switch leading to a denial of service.

Vulnerability class: Buffer Overflow

EPSS: 0.003 (17.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Broadcom Brocade_fabric_operating_system — versions 9.2.0
Brocade Fabric Os — versions before Brocade Fabric OS v9.1.1c and v9.2.0

Weakness classification (CWE)

CWE-120 — Buffer Copy without Checking Size of Input (Classic Buffer Overflow)

References

sirt@brocade.com (Vendor Advisory)
sirt@brocade.com (Third Party Advisory)

Frequently asked questions

What is CVE-2023-31430?: CVE-2023-31430 is a medium-severity vulnerability in Broadcom Brocade_fabric_operating_system, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 5.5/10. Published 2023-08-02.
How severe is CVE-2023-31430?: Medium severity. CVSS v3 base score is 5.5 out of 10.