4.3

CVE-2023-29178

A access of uninitialized pointer vulnerability [CWE-824]  in Fortinet FortiProxy version 7.2.0 through 7.2.3 and before 7.0.9 and FortiOS version 7.2.0 through 7.2.4 and before 7.0.11 allows an authenticated attacker to repetitively crash the httpsd process via crafted HTTP or HTTPS requests.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Fortinet ≫ FortiProxy Version >= 1.1.0 <= 1.1.6
Fortinet ≫ FortiProxy Version >= 1.2.0 <= 1.2.13
Fortinet ≫ FortiProxy Version >= 2.0.0 <= 2.0.12
Fortinet ≫ FortiProxy Version >= 7.0.0 <= 7.0.9
Fortinet ≫ FortiProxy Version 7.2.0
Fortinet ≫ FortiProxy Version 7.2.1
Fortinet ≫ FortiProxy Version 7.2.2
Fortinet ≫ FortiProxy Version 7.2.3
Fortinet ≫ FortiOS Version >= 6.0.0 <= 6.0.17
Fortinet ≫ FortiOS Version >= 6.2.0 <= 6.2.15
Fortinet ≫ FortiOS Version >= 6.4.0 <= 6.4.13
Fortinet ≫ FortiOS Version >= 7.0.0 <= 7.0.11
Fortinet ≫ FortiOS Version >= 7.2.0 <= 7.2.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.88% 0.545
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Fortinet 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE-824 Access of Uninitialized Pointer

The product accesses or uses a pointer that has not been initialized.

https://fortiguard.com/psirt/FG-IR-23-095
Vendor Advisory