CVE-2024-23615

A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 10.5 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as root.

Score

CVSS 3.1 10.0 Critical

Status

Modified - disclosures@exodusintel.com

Published

2024-01-26

Last modified

2025-05-29

Weaknesses

CWE-119, CWE-120

Affected products

• Symantec Messaging Gateway (Broadcom)
• Messaging Gateway (Symantec)

References

• https://blog.exodusintel.com/2024/01/25/symantec-messaging-gateway-libdec2lha-so-stack-buffer-overflow-remote-code-exec…