CVE-2024-29013
June 20, 2024, 12:43 p.m.
Tags
Product(s) Impacted
SonicOS SSL-VPN
Description
Heap-based buffer overflow vulnerability in the SonicOS SSL-VPN allows an authenticated remote attacker to cause Denial of Service (DoS) via memcpy function.
Weaknesses
CWE-122
Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
CWE ID: 122Date
Published: June 20, 2024, 9:15 a.m.
Last Modified: June 20, 2024, 12:43 p.m.
Status : Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
PSIRT@sonicwall.com
References
https://psirt.global.sonicwall.com/
PSIRT@sonicwall.com