CVE-2019-17652 — Fortinet / Fortinet FortiClientLinux

Description (CNA)

A stack buffer overflow vulnerability in FortiClient for Linux 6.2.1 and below may allow a user with low privilege to cause FortiClient processes running under root priviledge crashes via sending specially crafted "StartAvCustomScan" type IPC client requests to the fctsched process due the argv data not been well sanitized.

Affected (CNA)

Vendor / product	Versions
Fortinet / Fortinet FortiClientLinux	affected FortiClientLinux 6.2.1 and below

CWE

No CWE identifiers supplied.

References

https://fortiguard.com/psirt/FG-IR-19-238
https://danishcyberdefence.dk/blog/forticlient_linux

ADP enrichment

CVE

No English description supplied.

https://fortiguard.com/psirt/FG-IR-19-238
https://danishcyberdefence.dk/blog/forticlient_linux

CISA-ADP

No English description supplied.

No references supplied.