- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
-
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
-
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
-
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
-
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
-
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
-
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
-
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
-
- Support Widget
Does the glibc library (CVE-2015-7547) vulnerability affects SRA devices?
03/26/2020 
1,045 People found this article helpful
98,049 Views
Description
Does the glibc library (CVE-2015-7547) vulnerability affects SRA devices?
Resolution
Buffer overflow vulnerability in glibc library (CVE-2015-7547) currently affects versions equal and prior to 8.1.0.1-11sv for SRA 4600/1600/Virtual Appliance and 8.0.0.4-25sv for SRA 4200/1200.
You can find more information about this vulnerability in the following links:
https://support.sonicwall.com/product-notification/187642?productName=SonicWall%20SRA%20Series
https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-7547
In order to fix this issue the firmware must be upgraded to the firmware version 8.1.0.2-14sv or higher for the SRA 4600/1600/Virtual Appliance and 8.0.0.5-27sv for the SRA 4200/1200.
You can download the firmware from the www.mysonicwall.com website.
In order to upgrade the firmware on the physical appliances (SRA 4600/1600/4200/1200), please follow the KB article: https://www.sonicwall.com/en-us/support/knowledge-base/170502339501169
For the SRA Virtual Appliance, upgrading the firmware using the .sig file does not resolve the issue. In this case you must deploy a new OVA file. The following the steps describe the procedure to deploy a new OVA file:
- Export the settings from the old virtual appliance from “System” > “Settings” > “Export Settings…”.
- Make a note of the serial number and authentication code of the old virtual appliance. You can find these on the “System” > “Status” page.
- Power off the old virtual appliance.
- Deploy the new virtual appliance using the OVA file available from www.mysonicwall.com.
- Power on the new virtual appliance and configure the X0 interface using the CLI.
- Log into the new virtual appliance with the default administrator credentials and import your saved configuration settings from "System" > "Settings" > "Import Settings".
- In MySonicWall, click on the serial number of the old virtual appliance. On the Service Management page for it, click the "Delete" button to delete licensing for the old virtual appliance.
- Register the new virtual appliance using the same serial number and authentication code of the old virtual appliance.
Related Articles
- SMA100: NetExtender support for Windows ARM-based processors is not available on Windows platforms, use Mobile Connect until Ver-10.2.2 Release
- SMA100 Series: Maximum number of Un-authenticated Connections that each of the Product Supports.
- Configuring Device Management based on Device ID for SMA 100
YES
NO