QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-22396

Back to search

CVE-2024-22396

Published: Mar 14, 2024

Modified: Aug 1, 2024

PUBLISHED

Description

An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a specially crafted IKEv2 payload.

VendorProductVersions

SonicWall

SonicOS

affected
7.0.1-5145 and earlier versions
affected
7.1.1-7047 and earlier versions
affected
6.5.4.13-105n and earlier versions
affected
6.5.4.4-44v-21-2340 and earlier versions

Weaknesses (CWE)

CWE-190

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now