Database/Firmware, BMC & network fabric
SonicWall SonicOS: crafted request overflows a buffer and crashes the firewall
Impact
A remote, unauthenticated attacker sends a crafted request and crashes the firewall through a buffer overflow. A crashed edge firewall or SonicOSv instance cuts off everything behind it, including remote management of the GPU fleet and any tenant traffic it carries. The record describes denial of service only. It affects Gen5, Gen6 and Gen7 hardware and SonicOSv virtual firewalls.
Who can reach it
Unauthenticated remote attacker who can reach the firewall.
What to do
Flash the fixed SonicOS firmware listed in SonicWall advisory SNWLID-2021-0016. The appliance reboots, so traffic stops briefly unless an HA pair takes over.
References
Related entries
- SonicWall SonicOS: unauthenticated stack overflow crashes the firewallCVE-2023-0656 · SonicWall SonicOSHigh
- AMD SEV / SEV-ES - Owner's Certificate Authority (OCA) certificate parsing: Insufficient validation when parsing OCACVE-2021-26406 · AMD SEV / SEV-ES - Owner's Certificate Authority (OCA) certificate parsingHigh
- Arista EOS (VXLAN match rule in IPv4 ACL): If an IPv4 access list contains a VXLAN match rule, that rule and every ruleCVE-2021-28505 · Arista EOS (VXLAN match rule in IPv4 ACL)High
- Arista EOS (TerminAttr / IPsec): TerminAttr leaks IPsec sensitive material in plaintext to authorized usersCVE-2021-28508 · Arista EOS (TerminAttr / IPsec)High
- GRUB2 (PNG reader): A crafted PNG in the boot splash path causes an out-of-bounds write in GRUBCVE-2021-3695 · GRUB2 (PNG reader)High
- GRUB2 (JPEG reader): Crafted JPEG in the boot path drives a heap out-of-bounds write in GRUBCVE-2021-3697 · GRUB2 (JPEG reader)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.