Skip to content
fr Sign in
6.2 Medium

CVE-2023-29177 Multiple buffer copy without checking size of input ('classic buffer overflow') vulnerabilities [CWE-120] in FortiADC…

Description

Multiple buffer copy without checking size of input ('classic buffer overflow') vulnerabilities [CWE-120] in FortiADC version 7.2.0 and before 7.1.2 & FortiDDoS-F version 6.5.0 and before 6.4.1 allows a privileged attacker to execute arbitrary code or commands via specifically crafted CLI requests.

Affected products and versions

Product Affected versions Fixed in
FortiDDoS-F 6.5.0 No fix stated
FortiDDoS-F 6.4 6.4.0 → 6.4.1 No fix stated
FortiDDoS-F 6.3 6.3.0 → 6.3.4 No fix stated
FortiDDoS-F 6.2 6.2.0 → 6.2.3 No fix stated
FortiDDoS-F 6.1 6.1.0 → 6.1.4 No fix stated
FortiADC 7.2.0 No fix stated
FortiADC 7.1 7.1.0 → 7.1.2 No fix stated
FortiADC 7.0 7.0.0 → 7.0.5 No fix stated
FortiADC 6.2 6.2.0 → 6.2.6 No fix stated
Show the 5 other branches
Product Affected versions Fixed in
FortiADC 6.1 6.1.0 → 6.1.6 No fix stated
FortiADC 6.0 6.0.0 → 6.0.4 No fix stated
FortiADC 5.4 5.4.0 → 5.4.5 No fix stated
FortiADC 5.3 5.3.0 → 5.3.7 No fix stated
FortiADC 5.2 5.2.0 → 5.2.8 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiDDoS-F

The 9 CVEs of FortiDDoS-F →
CVE-2026-39815 A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet… 7.9 High CVE-2024-45325 An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78]… 6.5 Medium CVE-2022-23439 A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison… 4.1 Medium CVE-2022-27486 A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiDDoS… 5.9 Medium
Track this CVE