CVE-2021-31617 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Network Security

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer3 documents3 sources

Severity

9.8CRITICALNVD

EPSS

3.0%

top 13.40%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Stormshield Network Security

Timeline

PublishedJan 31

Latest updateFeb 8

Description

In ASQ in Stormshield Network Security (SNS) 1.0.0 through 2.7.8, 2.8.0 through 2.16.0, 3.0.0 through 3.7.20, 3.8.0 through 3.11.8, and 4.0.1 through 4.2.2, mishandling of memory management can lead to remote code execution.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

▶NVDstormshield/stormshield_network_security1.0.0 — 2.7.9+3

🔴Vulnerability Details

GHSA

GHSA-43x4-rqpq-prmp: In ASQ in Stormshield Network Security (SNS) 1↗2022-02-08

▶

CVEList

CVE-2021-31617: In ASQ in Stormshield Network Security (SNS) 1↗2022-01-31

▶