← Vulnerability feed

Vulnerability record · CVE-2024-23617 · published 26 January 2024

CVE-2024-23617: Broadcom symantec data center security server memory buffer overflow vulnerability

Broadcom · Symantec Data Center Security Server

A buffer overflow vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and before. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a crafted document to achieve code execution.

8.8 CVSS 3.1 High EPSS 1.7% · top 24.3% CWE-119 · Memory buffer overflowCWE-120 · Classic buffer overflow
8.8CVSS 3.1 base score, v2 9.3
1.7%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

A buffer overflow vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and before. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a crafted document to achieve code execution.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://blog.exodusintel.com/2024/01/25/symantec-data-loss-prevention-wp6sr-dll-stack-buffer-overflow-remote-code-execut Third Party Advisory
https://blog.exodusintel.com/2024/01/25/symantec-data-loss-prevention-wp6sr-dll-stack-buffer-overflow-remote-code-execut Third Party Advisory

Track CVE-2024-23617 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2015-8157Broadcom symantec critical system protection sql injection vulnerabilitySQL injection vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedd…EPSS 1.5%8.0CVE-2015-8798Broadcom symantec critical system protection path traversal vulnerabilityDirectory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, …EPSS 2.4%7.6CVE-2015-8799Broadcom symantec critical system protection path traversal vulnerabilityDirectory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, …EPSS 5.3%7.3CVE-2015-8800Broadcom symantec critical system protection injection vulnerabilitySymantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers …EPSS 1.2%5.5CVE-2016-5309Broadcom symantec data center security server out-of-bounds read vulnerabilityThe RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud…EPSS 6.9%5.5CVE-2016-5310Broadcom symantec data center security server out-of-bounds write vulnerabilityThe RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud…EPSS 5.3%9.5CVE-2026-88772Citrix netscaler application delivery controller memory buffer overflow vulnerabilityVulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 F…KEV8.8CVE-2026-8452Citrix NetScaler ADC and Gateway memory buffer overflow causes DoSCVE-2026-8452 is a memory buffer overflow (CWE-119) in Citrix NetScaler ADC and NetScaler Gateway that leads to unpredictable or erroneous behavior a…KEVEPSS 1.0%analysed

Source: NIST National Vulnerability Database (record CVE-2024-23617), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.