CVE-2020-11503: Buffer Overflow
Published Jun 18, 2020
·Updated
A heap-based buffer overflow in the awarrensmtp component of Sophos XG Firewall v17.5 MR11 and older potentially allows an attacker to run arbitrary code remotely.
Affected Software
14 affected components
Sophos SFOS<17.5
Sophos SFOS=17.5
Sophos SFOS=17.5-maintenance_release1
Sophos SFOS=17.5-maintenance_release10
Sophos SFOS=17.5-maintenance_release11
Sophos SFOS=17.5-maintenance_release2
Sophos SFOS=17.5-maintenance_release3
Sophos SFOS=17.5-maintenance_release4
Sophos SFOS=17.5-maintenance_release5
Sophos SFOS=17.5-maintenance_release6
Sophos SFOS=17.5-maintenance_release7
Sophos SFOS=17.5-maintenance_release8
Sophos SFOS=17.5-maintenance_release9
Sophos XG Firewall
Event History
Jun 18, 2020
CVE Published
via MITRE·03:25 PM
Data Sourced
via MITRE·03:25 PM
Description
Frequently Asked Questions
1
What is CVE-2020-11503?
CVE-2020-11503 is a heap-based buffer overflow vulnerability in the awarrensmtp component of Sophos XG Firewall v17.5 MR11 and older.
2
How severe is CVE-2020-11503?
CVE-2020-11503 has a severity rating of 9.8 (critical).
3
What software is affected by CVE-2020-11503?
Sophos XG Firewall v17.5 MR11 and older versions are affected by CVE-2020-11503.
4
How can an attacker exploit CVE-2020-11503?
An attacker can exploit CVE-2020-11503 by running arbitrary code remotely.
5
Where can I find more information about CVE-2020-11503?
You can find more information about CVE-2020-11503 at the following link: https://community.sophos.com/b/security-blog/posts/advisory-potential-rce-through-heap-overflow-in-awarrensmtp-cve-2020-11503