Skip to content
CVE PROGRAM SOURCE RECORD3.9 Low

CVE-2023-29178

A access of uninitialized pointer vulnerability [CWE-824] vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 through 7.0.11, FortiOS 6.4 all versions, FortiOS 6.2

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fortinet

Description

A access of uninitialized pointer vulnerability [CWE-824] vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 through 7.0.11, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiProxy 7.2.0 through 7.2.3, FortiProxy 7.0.0 through 7.0.9, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions allows an authenticated attacker to repetitively crash the httpsd process via crafted HTTP or HTTPS requests.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortinet FortiOS

Default version status: unaffected

  • 7.2.0 to ≤ 7.2.4affected
  • 7.0.0 to ≤ 7.0.11affected
  • 6.4.0 to ≤ 6.4.16affected
  • 6.2.0 to ≤ 6.2.17affected
  • 6.0.0 to ≤ 6.0.18affected

Fortinet FortiProxy

Default version status: unaffected

  • 7.2.0 to ≤ 7.2.3affected
  • 7.0.0 to ≤ 7.0.9affected
  • 2.0.0 to ≤ 2.0.14affected
  • 1.2.1 to ≤ 1.2.13affected
  • 01.02.00affected
  • 1.1.4 to ≤ 1.1.6affected
  • 01.01.00 to ≤ 01.01.03affected

References