SonicWall SonicOS Stack-Based Buffer Overflow Vulnerability in SSLVPN Service Leading to Denial-of-Service

A stack-based buffer overflow vulnerability has been identified in the SonicOS SSLVPN service. This vulnerability allows remote, unauthenticated attackers to cause a denial-of-service condition, potentially crashing the affected firewall. The issue arises in specific Gen7 and Gen8 hardware firewalls, as well as Gen7 virtual firewalls, when the SonicOS SSLVPN service is enabled.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the impacted firewall to crash.

Remediation

Administrators are advised to limit SonicOS SSLVPN access to trusted sources by modifying existing access rules. This can help restrict VPN access based on user, service, destination, and source WAN IP addresses. For detailed guidance, refer to SonicWall's knowledgebase articles on restricting VPN access and SSLVPN access based on source WAN IPs.