CVE-2024-23614

A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 9.5 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as root.

Score

CVSS 3.1 10.0 Critical

Status

Modified - disclosures@exodusintel.com

Published

2024-01-26

Last modified

2024-09-05

Weaknesses

CWE-119, CWE-120

Affected products

• Symantec Messaging Gateway (Broadcom)
• Messaging Gateway (Symantec)

References

• https://blog.exodusintel.com/2024/01/25/symantec-messaging-gateway-stack-buffer-overflow-remote-code-execution/