{"id":93,"created_when":"2020-10-12T09:04:38Z","created_by":"arun","updated_when":"2020-10-12T09:04:38Z","updated_by":"arun","advisory_id":"SNWLID-2020-0010","title":"Denial of Service (DoS) vulnerability in the SonicOS due to buffer overflow and potentially execute arbitrary code","published_when":"2020-10-12T09:04:38Z","last_updated_when":"2020-10-20T09:04:38Z","impact":"critical","cvss":"9.4","cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H","cvss_version":3.0,"cwe":"CWE-120","cve":"CVE-2020-5135","cpe":"","summary":"A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall. This vulnerability affected SonicOS Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3 and SonicOSv 6.5.4.v.","is_workaround_available":true,"workaround":"","detail":"","affected_products":"<ul><li>SonicOS 6.5.4.6-79n and earlier</li><li><span style=\"font-size: 1rem;\">SonicOS 6.5.1.11-4n and earlier</span></li><li>SonicOS 6.0.5.3-93o and earlier<br></li><li>SonicOSv 6.5.4.4-44v-21-794 and earlier</li></ul>","fixed_software":"<ul><li>SonicOS 6.5.4.7-83n</li><li><span style=\"font-size: 1rem;\">SonicOS 6.5.1.12-1n</span><br></li><li>SonicOS 6.0.5.3-94o</li><li>SonicOSv 6.5.4.v-21s-987</li></ul>","credits":"<p><span style=\"font-family: Arial, &quot;Helvetica Neue&quot;, Helvetica, sans-serif; background-color: rgb(252, 250, 248);\">Nikita Abramov - Positive Technologies</span></p><p><span style=\"font-family: Arial, &quot;Helvetica Neue&quot;, Helvetica, sans-serif; background-color: rgb(252, 250, 248);\">Craig Young - Tripwire</span></p>","revision_history":"<div><ul class=\"summary-detail-item-label-group\"><li class=\"summary-detail-label\">Version</li><li class=\"summary-detail-item\"><p>1.0</p></li></ul><ul class=\"summary-detail-item-label-group\"><li class=\"summary-detail-label\">Date</li><li class=\"summary-detail-item\"><p>11-Oct-2020</p></li></ul><ul class=\"summary-detail-item-label-group\"><li class=\"summary-detail-label\">Description</li><li class=\"summary-detail-item\"><p>Initial Release.</p><p>---------------------------------</p><p><span style=\"color: rgb(0, 0, 0); font-size: 1rem;\">Version</span></p><p><span style=\"font-size: 1rem;\">1.1</span></p><p><span style=\"color: rgb(0, 0, 0); font-size: 1rem;\">Date</span></p><p><span style=\"font-size: 1rem;\">16-Oct-2020</span></p><p><span style=\"color: rgb(0, 0, 0); font-size: 1rem;\">Description</span></p><p><span style=\"font-size: 1rem;\">Modified typo error \"SonicOS 6.5.4.7-79n to SonicOS 6.5.4.6-79n\" in the Affected Products section.</span></p></li></ul></div><ul class=\"summary-detail-item-label-group\"><li class=\"summary-detail-item\"><p>---------------------------------</p><p><span style=\"color: rgb(0, 0, 0); font-size: 1rem;\">Version</span></p><p><span style=\"font-size: 1rem;\">1.2</span></p><p><span style=\"color: rgb(0, 0, 0); font-size: 1rem;\">Date</span></p><p><span style=\"font-size: 1rem;\">20-Oct-2020</span></p><p><span style=\"color: rgb(0, 0, 0); font-size: 1rem;\">Description</span></p><p><span style=\"font-size: 1rem;\">Removed Gen 7 versions,</span><span style=\"font-size: 1rem;\">&nbsp;since all released versions of Gen 7 SonicOS were already patched.</span></p></li></ul>","references":"","vuln_status":"Applicable","status":"published","is_published":true,"patterns":[],"vulnerable_products":[{"id":2,"name":"SonicOS Gen6 Platform - TZ/NSa/SM/NSv"}]}