Skip to content
OpenAdvisories
Unscored CVE-2021-20048 EUVD-2021-7511GHSA-248v-73qf-wh7x

A Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote authenticated attacker to cause Denial of Servi…

Published Jan 7, 2022 · Updated Aug 3, 2024 · Assigned by sonicwall

Description

A Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote authenticated attacker to cause Denial of Service (DoS) and potentially results in code execution in the firewall. This vulnerability affected SonicOS Gen 5, Gen 6 and Gen 7 firmware versions.

Affected products

VendorProductAffectedFixed
SonicWall SonicOS 7.0.1-R146 and earlier, 7.0.1-5023-1349 and earlier, 7.0.1-5018-R1715 and earlier, 6.5.4.8-89n and earlier, 6.5.1.13-1n and earlier, 6.0.5.3-94o and earlier, 6.5.4.v_21s-1288 and earlier, 5.9.1.13 and earlier —

References