Stack-based buffer overflow vulnerability in the SonicOS HTTP server allows an authenticated remote attacker to cause Denial of Service (DoS) via sscanf function.
References
Link | Resource |
---|---|
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0008 | Vendor Advisory |
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0008 | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
21 Nov 2024, 09:07
Type | Values Removed | Values Added |
---|---|---|
References | () https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0008 - Vendor Advisory |
19 Aug 2024, 19:34
Type | Values Removed | Values Added |
---|---|---|
First Time |
Sonicwall nsa 2700
Sonicwall tz570 Sonicwall tz370 Sonicwall nsa 4700 Sonicwall nssp 10700 Sonicwall Sonicwall nsv 270 Sonicwall tz570w Sonicwall nsa 3700 Sonicwall nssp 13700 Sonicwall tz370w Sonicwall nsa 5700 Sonicwall nsv 870 Sonicwall tz570p Sonicwall nssp 11700 Sonicwall tz470w Sonicwall tz470 Sonicwall tz270 Sonicwall tz670 Sonicwall nsa 6700 Sonicwall sonicos Sonicwall tz270w Sonicwall nsv 470 |
|
References | () https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0008 - Vendor Advisory | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
CWE | CWE-787 | |
CPE | cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:* cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:* cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:* cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:* cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:* cpe:2.3:h:sonicwall:nsv_870:-:*:*:*:*:*:*:* cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:* cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:* cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:* cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:* cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* cpe:2.3:h:sonicwall:nsv_470:-:*:*:*:*:*:*:* cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:* cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:* cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:* cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:* cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:* cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:* cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:* cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:* cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:* cpe:2.3:h:sonicwall:nsv_270:-:*:*:*:*:*:*:* |
20 Jun 2024, 12:43
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
20 Jun 2024, 09:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-06-20 09:15
Updated : 2024-11-21 09:07
NVD link : CVE-2024-29012
Mitre link : CVE-2024-29012
CVE.ORG link : CVE-2024-29012
JSON object : View
Products Affected
sonicwall
- nsa_2700
- nssp_10700
- nsv_470
- tz370w
- tz470
- tz270
- nssp_11700
- nsv_270
- nsa_4700
- tz670
- tz370
- nsv_870
- tz570p
- tz270w
- sonicos
- tz570
- nsa_6700
- tz570w
- nssp_13700
- nsa_5700
- tz470w
- nsa_3700