Symantec Messaging Gateway vulnerabilities

3 known vulnerabilities in Symantec Messaging Gateway from Broadcom. 3 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Messaging Gateway: Buffer Copy without Checking Size of Input

  CVE-2024-23615Jan 26, 2024SymantecEPSS 1.88%

  A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 10.5 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as root.

• 9.8 Critical severity

  Messaging Gateway: Buffer Copy without Checking Size of Input

  CVE-2024-23614Jan 26, 2024SymantecEPSS 1.61%

  A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 9.5 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as root.

• 7.5 High severity

  OpenSSL Information Disclosure Exploited

  CVE-2014-0160Apr 7, 2014OpenSSLEPSS 100%

  The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, a