CVE-2026-93862
2026-10-27
16h17 +00:00
16h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
An out-of-bounds read vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster interconnect, such as a compromised cluster peer or an on-path network attacker, to repeatedly crash the firewall's cluster synchronization process by sending specially crafted network traffic, resulting in a sustained denial of service.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Out-of-bounds Read The product reads data past the end, or before the beginning, of the intended buffer. |
||
| Improper Validation of Array Index The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array. |
||
| Out-of-bounds Write The product writes data past the end, or before the beginning, of the intended buffer. |
||
| Use of Out-of-range Pointer Offset The product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer. |
