PT-2024-35812 · Apache+1 · Apache Web Server+1

Alain Mowat · Published 2024-12-05 · Updated 2024-12-06 · CVE-2024-53703

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SonicWall SMA100 SSLVPN versions 10.2.1.13-72sv and earlier

Description A problem in the mod httprp library loaded by the Apache web server allows remote attackers to cause a stack-based buffer overflow, potentially leading to code execution. This issue affects the SonicWall SMA100 SSLVPN firmware.

Recommendations For versions 10.2.1.13-72sv and earlier, update to a newer version that contains a fix for this issue. As a temporary workaround, consider restricting access to the mod httprp library until a patch is available.

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2024-53703

Affected Products

Apache Web Server

Sonicwall Sma100 Sslvpn

References · 9

• https://osv.dev/vulnerability/CVE-2024-53703 · Vendor Advisory
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0018 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-53703 · Security Note
• https://twitter.com/VulmonFeeds/status/1864844913893916969 · Twitter Post
• https://t.me/latest_high_impact_cve/1614 · Telegram Post
• https://t.me/cvedetector/12099 · Telegram Post
• https://twitter.com/jbhall56/status/1865043556416520450 · Twitter Post
• https://twitter.com/CVEnew/status/1864680082788503961 · Twitter Post
• https://twitter.com/oktsec/status/1864695822564135297 · Twitter Post