Database/Firmware, BMC & network fabric
SonicWall SonicOS IPSec VPN: unauthenticated heap overflow crashes the firewall
CVSS 7.5CVE-2024-40764Firmware, BMC & network fabriccurated
Impact
A remote, unauthenticated attacker triggers a heap-based buffer overflow in the IPSec VPN and causes a denial of service. Site-to-site and remote-access tunnels into the datacenter go down with the firewall. The record describes denial of service only.
Who can reach it
Unauthenticated remote attacker who can reach the firewall's IPSec VPN endpoint.
What to do
Flash the fixed SonicOS firmware listed in SonicWall advisory SNWLID-2024-0012. The appliance reboots during the upgrade.
References
Related entries
- Linux kernel - RDMA/rxe unreliable datagram responder, drivers/infiniband/sw/rxe/rxe_resp.c: The IB architecture says aCVE-2024-40992 · Linux kernel - RDMA/rxe unreliable datagram responder, drivers/infiniband/sw/rxe/rxe_resp.cHigh
- Linux kernel NVMe-oF RDMA target (nvmet, uninitialised completion-entry result field): This is a straight kernel-stackCVE-2024-41079 · Linux kernel NVMe-oF RDMA target (nvmet, uninitialised completion-entry result field)High
- Linux kernel InfiniBand core (ib_umad): ib_umad kept received management datagrams on an unbounded listCVE-2024-42145 · Linux kernel InfiniBand core (ib_umad)High
- AMI AptioV BIOS (TOCTOU race condition): Firmware TOCTOU race allowing execution of arbitrary code on the target deviceCVE-2024-42444 · AMI AptioV BIOS (TOCTOU race condition)High
- AMI AptioV BIOS (TOCTOU race condition): Second firmware TOCTOU race reaching arbitrary code execution with scope changeCVE-2024-42446 · AMI AptioV BIOS (TOCTOU race condition)High
- GRUB2 (gettext / message catalogue): Integer overflow reading a crafted translation catalogue gives bothCVE-2024-45776 · GRUB2 (gettext / message catalogue)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.