{"id":"CVE-2019-16152","state":"PUBLISHED","title":"A Denial of service (DoS) vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to cause FortiClient processes running under root privilege cr","description":"A Denial of service (DoS) vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to cause FortiClient processes running under root privilege crashes via sending specially crafted IPC client requests to the fctsched process due the nanomsg not been correctly validated.","publishedAt":"2020-02-06T15:27:36.000Z","updatedAt":"2024-10-25T14:03:38.520Z","severity":null,"assigner":"fortinet","products":["Fortinet Fortinet FortiClientLinux"],"affected":[{"vendor":"Fortinet","product":"Fortinet FortiClientLinux","versions":[{"version":"FortiClientLinux 6.2.1 and below","status":"affected"}]}],"references":["https://fortiguard.com/psirt/FG-IR-19-238","https://danishcyberdefence.dk/blog/forticlient_linux"],"weaknesses":[],"ingestedAt":"2026-10-29T19:45:36.262Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/16xxx/CVE-2019-16152.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-16152","state":"PUBLISHED","datePublished":"2020-02-06T15:27:36.000Z","dateUpdated":"2024-10-25T14:03:38.520Z","assignerShortName":"fortinet","assignerOrgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","dateReserved":"2019-09-09T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A Denial of service (DoS) vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to cause FortiClient processes running under root privilege crashes via sending specially crafted IPC client requests to the fctsched process due the nanomsg not been correctly validated."}],"affected":[{"vendor":"Fortinet","product":"Fortinet FortiClientLinux","versions":[{"version":"FortiClientLinux 6.2.1 and below","status":"affected"}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-19-238","tags":["x_refsource_CONFIRM"]},{"url":"https://danishcyberdefence.dk/blog/forticlient_linux","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"description":"Escalation of privilege","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"fortinet","dateUpdated":"2020-02-07T16:05:15.000Z","orgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@fortinet.com","ID":"CVE-2019-16152","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Fortinet FortiClientLinux","version":{"version_data":[{"version_value":"FortiClientLinux 6.2.1 and below"}]}}]},"vendor_name":"Fortinet"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A Denial of service (DoS) vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to cause FortiClient processes running under root privilege crashes via sending specially crafted IPC client requests to the fctsched process due the nanomsg not been correctly validated."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Escalation of privilege"}]}]},"references":{"reference_data":[{"name":"https://fortiguard.com/psirt/FG-IR-19-238","refsource":"CONFIRM","url":"https://fortiguard.com/psirt/FG-IR-19-238"},{"name":"https://danishcyberdefence.dk/blog/forticlient_linux","refsource":"MISC","url":"https://danishcyberdefence.dk/blog/forticlient_linux"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://fortiguard.com/psirt/FG-IR-19-238","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://danishcyberdefence.dk/blog/forticlient_linux","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T01:10:41.743Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-10-23T13:59:32.641067Z","id":"CVE-2019-16152","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-10-25T14:03:38.520Z"}}]}}}