Vulnerability · Published Jun 20, 2024 · Assigned by sonicwall

CVE-2024-29013

Medium 5.3

In plain English

A medium-severity heap buffer overflow in SonicOS from SonicWall. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 51% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)0.6%top 49.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Heap-based buffer overflow vulnerability in the SonicOS SSL-VPN allows an authenticated remote attacker to cause Denial of Service (DoS) via memcpy function.

Affected products (as reported)

Vendor	Product	Versions
SonicWall	SonicOS	7.1.1-7051 and earlier versions

Weakness: CWE-122 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0009 vendor-advisory