An issue was discovered in Stormshield Network Security (SNS) SNS 4.3.13 through 4.3.22 before 4.3.23, SNS 4.6.0 through 4.6.9 before 4.6.10, and SNS 4.7.0 through 4.7.1 before 4.7.2. An attacker can overflow the cookie threshold, making an IPsec connection impossible.
References
| Link | Resource |
|---|---|
| https://advisories.stormshield.eu | Vendor Advisory |
| https://advisories.stormshield.eu/2023-024/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
04 Jan 2024, 01:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://advisories.stormshield.eu - Vendor Advisory | |
| References | () https://advisories.stormshield.eu/2023-024/ - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CPE | cpe:2.3:a:stormshield:network_security:*:*:*:*:*:*:*:* | |
| CWE | CWE-120 | |
| First Time |
Stormshield network Security
Stormshield |
26 Dec 2023, 20:34
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
25 Dec 2023, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-25 07:15
Updated : 2024-01-04 01:15
NVD link : CVE-2023-47091
Mitre link : CVE-2023-47091
CVE.ORG link : CVE-2023-47091
JSON object : View
Products Affected
stormshield
- network_security
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')