Memory Leak in TCP Stack of Sophos UTM Kernel

CVE-2014-2537

Summary

A memory leak vulnerability exists in the TCP stack of the kernel in Sophos UTM prior to version 9.109. This flaw can be exploited by remote attackers to cause a denial of service by consuming memory resources, potentially leading to system instability and interruptions in service. The specifics of the attack vectors are not defined, but it is critical for users of affected versions to apply appropriate patches to mitigate this risk.

References