CVE-2013-7306

CVE	CVE-2013-7306
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2014-01-23 17:55:00 UTC
Updated	2014-01-23 19:09:00 UTC
Description	The OSPF implementation on Brocade routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.

Problem Types: CWE-20

Type	Vendor	Product	Version	Update	Edition	Language
Hardware	Brocade	Adx	-	All	All	All
Hardware	Brocade	Adx	-	All	All	All
Hardware	Brocade	Bigiron Rx	-	All	All	All
Hardware	Brocade	Bigiron Rx	-	All	All	All
Hardware	Brocade	Fastiron	-	All	All	All
Hardware	Brocade	Fastiron	-	All	All	All
Hardware	Brocade	Icx	-	All	All	All
Hardware	Brocade	Icx	-	All	All	All
Hardware	Brocade	Mlx	-	All	All	All
Hardware	Brocade	Mlx	-	All	All	All
Hardware	Brocade	Netiron Cer	-	All	All	All
Hardware	Brocade	Netiron Cer	-	All	All	All
Hardware	Brocade	Netiron Ces	-	All	All	All
Hardware	Brocade	Netiron Ces	-	All	All	All
Hardware	Brocade	Netiron Xmr	-	All	All	All
Hardware	Brocade	Netiron Xmr	-	All	All	All
Hardware	Brocade	Turboiron	-	All	All	All
Hardware	Brocade	Turboiron	-	All	All	All
Hardware	Brocade	Vdx	-	All	All	All
Hardware	Brocade	Vdx	-	All	All	All
Hardware	Brocade	Vyatta	-	All	All	All
Hardware	Brocade	Vyatta	-	All	All	All

Reference	Source	Link	Tags
Vulnerability Note VU#229804 - Open Shortest Path First (OSPF) Protocol does not specify unique LSA lookup identifers	CERT-VN	www.kb.cert.org	Third Party Advisory, US Government Resource
Brocade Information for VU#229804	CONFIRM	www.kb.cert.org
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.