CVE-2024-29012: Buffer Overflow
Published Jun 20, 2024
·Updated
Stack-based buffer overflow vulnerability in the SonicOS HTTP server allows an authenticated remote attacker to cause Denial of Service (DoS) via sscanf function.
Affected Software
24 affected components
All of the following
Any of the following
SonicWall SonicOS<7.0.1-5161
SonicWall SonicOS>=7.1.1<7.1.1-7058
SonicWall SonicOS>=7.1.2<7.1.2-7019
Any of the following
SonicWall Nsa 2700
SonicWall Nsa 3700
SonicWall Nsa 4700
SonicWall Nsa 5700
SonicWall Nsa 6700
SonicWall Nssp 10700
SonicWall Nssp 11700
SonicWall Nssp 13700
SonicWall Nsv 270
SonicWall Nsv 470
SonicWall Nsv 870
SonicWall Tz270
SonicWall Tz270w
SonicWall Tz370
SonicWall Tz370w
SonicWall Tz470
SonicWall Tz470w
SonicWall Tz570
SonicWall Tz570p
SonicWall Tz570w
SonicWall Tz670
Event History
Jun 20, 2024
CVE Published
via MITRE·08:11 AM
Data Sourced
via MITRE·08:11 AM
DescriptionWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-29012?
CVE-2024-29012 is classified as a high severity vulnerability due to its potential to cause Denial of Service (DoS) attacks.
2
How do I fix CVE-2024-29012?
To fix CVE-2024-29012, you should update your SonicOS to the latest available version beyond 7.0.1-5161, 7.1.1-7058, or 7.1.2-7019.
3
Who is affected by CVE-2024-29012?
CVE-2024-29012 affects specific versions of SonicWall SonicOS prior to 7.0.1-5161 and certain ranges of versions 7.1.1 and 7.1.2.
4
What type of vulnerability is CVE-2024-29012?
CVE-2024-29012 is a stack-based buffer overflow vulnerability found in the SonicOS HTTP server.
5
Can CVE-2024-29012 be exploited remotely?
Yes, CVE-2024-29012 can be exploited by an authenticated remote attacker.