CVE-2024-29013: Buffer Overflow
Published Jun 20, 2024
·Updated
Heap-based buffer overflow vulnerability in the SonicOS SSL-VPN allows an authenticated remote attacker to cause Denial of Service (DoS) via memcpy function.
Affected Software
24 affected components
All of the following
Any of the following
SonicWall SonicOS<7.0.1-5161
SonicWall SonicOS>=7.1.1<7.1.1-7058
SonicWall SonicOS>=7.1.2<7.1.2-7019
Any of the following
SonicWall Nsa 2700
SonicWall Nsa 3700
SonicWall Nsa 4700
SonicWall Nsa 5700
SonicWall Nsa 6700
SonicWall Nssp 10700
SonicWall Nssp 11700
SonicWall Nssp 13700
SonicWall Nsv 270
SonicWall Nsv 470
SonicWall Nsv 870
SonicWall Tz270
SonicWall Tz270w
SonicWall Tz370
SonicWall Tz370w
SonicWall Tz470
SonicWall Tz470w
SonicWall Tz570
SonicWall Tz570p
SonicWall Tz570w
SonicWall Tz670
Event History
Jun 20, 2024
CVE Published
via MITRE·08:14 AM
Data Sourced
via MITRE·08:14 AM
DescriptionWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-29013?
CVE-2024-29013 is classified as a high severity vulnerability due to its potential to cause Denial of Service (DoS) attacks.
2
How do I fix CVE-2024-29013?
To fix CVE-2024-29013, update SonicOS to the latest version, specifically beyond 7.0.1-5161.
3
What type of vulnerability is CVE-2024-29013?
CVE-2024-29013 is a heap-based buffer overflow vulnerability.
4
Who is affected by CVE-2024-29013?
CVE-2024-29013 affects authorized users of specific versions of SonicWall SonicOS.
5
What can an attacker do using CVE-2024-29013?
An attacker exploiting CVE-2024-29013 can cause a Denial of Service (DoS) by leveraging the vulnerability in the memcpy function.