Broadcom Brocade Fabric Operating System

Privilege issues in multiple commands

In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).

Arbitrary File Overwrite using less command

Linux Kernel sctp_destroy_sock race condition

XSS vulnerability in Brocade Webtools

In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within the request URL.

There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability.

buffer overflow vulnerability in “secpolicydelete” command

A buffer overflow vulnerability in “diagstatus” command

CLI allows upload or transfer files of dangerous types

An information disclosure in the web interface of Brocade Fabric OS