An issue was discovered in Stormshield Network Security (SNS) SNS 4.3.13 through 4.3.22 before 4.3.23, SNS 4.6.0 through 4.6.9 before 4.6.10, and SNS 4.7.0 through 4.7.1 before 4.7.2. An attacker can overflow the cookie threshold, making an IPsec connection impossible.
References
| Link | Resource |
|---|---|
| https://advisories.stormshield.eu | Vendor Advisory |
| https://advisories.stormshield.eu/2023-024/ | Vendor Advisory |
| https://advisories.stormshield.eu | Vendor Advisory |
| https://advisories.stormshield.eu/2023-024/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 08:29
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://advisories.stormshield.eu - Vendor Advisory | |
| References | () https://advisories.stormshield.eu/2023-024/ - Vendor Advisory |
20 Aug 2024, 14:58
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Stormshield stormshield Network Security
|
|
| CPE | cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:* |
04 Jan 2024, 01:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-120 | |
| References | () https://advisories.stormshield.eu - Vendor Advisory | |
| References | () https://advisories.stormshield.eu/2023-024/ - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| First Time |
Stormshield network Security
Stormshield |
|
| CPE | cpe:2.3:a:stormshield:network_security:*:*:*:*:*:*:*:* |
25 Dec 2023, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-25 07:15
Updated : 2024-11-21 08:29
NVD link : CVE-2023-47091
Mitre link : CVE-2023-47091
CVE.ORG link : CVE-2023-47091
JSON object : View
Products Affected
stormshield
- stormshield_network_security
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')