Stack-Based Buffer Overflow in SonicWall SonicOS Firewalls
CVE-2021-20046

8.8HIGH

Key Information:

Vendor

Sonicwall
Status
Sonicos
Vendor
CVE Published:
10 January 2022

What is CVE-2021-20046?

A stack-based buffer overflow exists in the HTTP Content-Length response header of SonicWall SonicOS, potentially allowing a remote authenticated attacker to execute arbitrary code. This vulnerability can also lead to a Denial of Service (DoS), impacting the functionality of the firewall. It affects multiple versions of SonicOS, specifically Gen 5, Gen 6, and Gen 7 firmware, thus underlining the importance of applying necessary updates to mitigate risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

SonicOS 7.0.1-R146 and earlier

SonicOS 7.0.1-5023-1349 and earlier

SonicOS 7.0.1-5018-R1715 and earlier

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-202...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.