CVEvulnerability
CVE-2023-29179
6.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2024-02-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-476
Description
A null pointer dereference in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, Fortiproxy version 7.2.0 through 7.2.4, 7.0.0 through 7.0.10 allows attacker to denial of service via specially crafted HTTP requests.
Affected configurations
• fortinet fortios (>= 6.4.0 < 6.4.13)
• fortinet fortios (>= 7.0.0 < 7.0.12)
• fortinet fortios (>= 7.2.0 < 7.2.5)
• fortinet fortiproxy (>= 7.0.0 < 7.0.11)
• fortinet fortiproxy (>= 7.2.0 < 7.2.5)
Related
Weakness · CWE (1)
- CWE-476 NULL Pointer Dereference weakness
References
- https://fortiguard.com/psirt/FG-IR-23-125 Vendor Advisory
- https://fortiguard.com/psirt/FG-IR-23-125 Vendor Advisory