In Stormshield Network Security (SNS) before 3.7.25, 3.8.x through 3.11.x before 3.11.13, 4.x before 4.2.10, and 4.3.x before 4.3.5, a flood of connections to the SSLVPN service might lead to saturation of the loopback interface. This could result in the blocking of almost all network traffic, making the firewall unreachable. An attacker could exploit this via forged and properly timed traffic to cause a denial of service.
References
Link | Resource |
---|---|
https://advisories.stormshield.eu/2022-003 | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2022-03-15T20:26:36
Updated: 2022-03-20T02:24:49
Reserved: 2022-01-26T00:00:00
Link: CVE-2022-23989
JSON object: View
NVD Information
Status : Analyzed
Published: 2022-03-15T21:15:09.603
Modified: 2022-03-24T20:24:41.953
Link: CVE-2022-23989
JSON object: View
Redhat Information
No data.
CWE