CVE-2024-40764
July 18, 2024, 12:28 p.m.
Tags
Product(s) Impacted
SonicOS IPSec VPN
Description
Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service (DoS).
Weaknesses
CWE-122
Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
CWE ID: 122Date
Published: July 18, 2024, 8:15 a.m.
Last Modified: July 18, 2024, 12:28 p.m.
Status : Undergoing Analysis
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
PSIRT@sonicwall.com
References
https://psirt.global.sonicwall.com/
PSIRT@sonicwall.com