Description (CNA)
An Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below, version 7.2.9 and below and FortiSASE FortiOS tenant version 24.3.b IPsec IKE service may allow an unauthenticated remote attacker to trigger memory consumption leading to Denial of Service via crafted requests.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fortinet / FortiOS | affected 7.6.0; affected 7.4.0 through 7.4.4; affected 7.2.0 through 7.2.9 |
| Fortinet / FortiProxy | affected 7.4.0 through 7.4.5; affected 7.2.0 through 7.2.11; affected 7.0.0 through 7.0.18; affected 2.0.0 through 2.0.14 |
| Fortinet / FortiPAM | affected 1.4.0 through 1.4.1; affected 1.3.0; affected 1.2.0; affected 1.1.0 through 1.1.2; affected 1.0.0 through 1.0.3 |
CWE
CWE-125
References
ADP enrichment
No English description supplied.
No references supplied.