Stonesoft vulnerabilities
6 vulnerabilities
Known vulnerabilities in Stonesoft products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 9 products.
Products
9- Servercluster3 vulnerabilities
- Stonebeat Fullcluster3 vulnerabilities
- Stonebeat Securitycluster3 vulnerabilities
- Stonebeat Webcluster3 vulnerabilities
- Stonegate2 vulnerabilities
- Stonegate Vpn Client2 vulnerabilities
- Firewall Engine1 vulnerabilities
- Stonegate Firewall1 vulnerabilities
- Stonegate Ips1 vulnerabilities
CVE-2007-5793stonesoftstonegate_ips
EPSS score1.60%
Stonesoft StoneGate IPS before 4.0 does not properly decode Fullwidth/Halfwidth Unicode encoded data, which makes it easier for remote attackers to scan or penetrate systems and avoid detection.CVE-2005-3672stonesoftstonegate_firewallEPSS score2.34%
The Internet Key Exchange version 1 (IKEv1) implementation in Stonesoft StoneGate Firewall before 2.6.1 allows remote attackers to cause a denial of service via certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the Stonesoft advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.CVE-2004-00794dwebstar+55EPSS score9.54%
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.CVE-2004-00814dwebstar+55EPSS score7.23%
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.CVE-2004-01124dwebstar+54EPSS score10.42%
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.CVE-2004-0498stonesoftfirewall_engineEPSS score1.26%
The H.323 protocol agent in StoneSoft firewall engine 2.2.8 and earlier allows remote attackers to cause a denial of service (crash) via crafted H.323 packets.