PT-2021-17889 · Stormshield · Stormshield Sns

Published 2021-05-06 · Updated 2024-08-20 · CVE-2021-28665

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Stormshield SNS versions prior to 3.7.18 Stormshield SNS versions prior to 3.11.6 Stormshield SNS versions prior to 4.1.6

Description: The issue is related to a memory-management defect in the SNMP plugin, which can cause excessive consumption of memory and CPU resources, potentially leading to a denial of service.

Recommendations: For versions prior to 3.7.18, update to version 3.7.18 or later. For versions prior to 3.11.6, update to version 3.11.6 or later. For versions prior to 4.1.6, update to version 4.1.6 or later.

Fix

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2021-28665

Affected Products

Stormshield Sns

References · 6

• https://osv.dev/vulnerability/CVE-2021-28665 · Vendor Advisory
• https://advisories.stormshield.eu · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-28665 · Security Note
• https://advisories-admin.stormshield.eu/2021-014 · Note
• https://t.me/cvenotify/91293 · Telegram Post
• https://t.me/cvenotify/14184 · Telegram Post