CVEvulnerability
CVE-2023-33305
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-06-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.9 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-835
Description
A loop with unreachable exit condition ('infinite loop') in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS version 7.0.0 through 7.0.10, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiProxy version 7.2.0 through 7.2.3, FortiProxy version 7.0.0 through 7.0.9, FortiProxy 2.0 all versions, FortiProxy 1.2 all versions, FortiProxy 1.1 all versions, FortiProxy 1.0 all versions, FortiWeb version 7.2.0 through 7.2.1, FortiWeb version 7.0.0 through 7.0.6, FortiWeb 6.4 all versions, FortiWeb 6.3 all versions allows attacker to perform a denial of service via specially crafted HTTP requests.
Affected configurations
• fortinet fortiproxy (>= 1.0.0 <= 1.0.7)
• fortinet fortiproxy (>= 1.1.0 <= 1.1.6)
• fortinet fortiproxy (>= 1.2.0 <= 1.2.13)
• fortinet fortiproxy (>= 2.0.0 <= 2.0.12)
• fortinet fortiproxy (>= 7.0.0 <= 7.0.9)
• fortinet fortiproxy (>= 7.2.0 <= 7.2.3)
• fortinet fortiweb (>= 6.3.0 <= 6.3.23)
• fortinet fortiweb (>= 6.4.0 <= 6.4.3)
• fortinet fortiweb (>= 7.0.0 <= 7.0.6)
• fortinet fortiweb 7.2.0
• fortinet fortiweb 7.2.1
• fortinet fortios (>= 5.0.0 <= 5.0.14)
• fortinet fortios (>= 5.2.0 <= 5.2.15)
• fortinet fortios (>= 5.4.0 <= 5.4.13)
• fortinet fortios (>= 5.6.0 <= 5.6.14)
• fortinet fortios (>= 6.0.0 <= 6.0.17)
• fortinet fortios (>= 6.2.0 <= 6.2.15)
• fortinet fortios (>= 6.4.0 <= 6.4.13)
• fortinet fortios (>= 7.0.0 <= 7.0.9)
• fortinet fortios (>= 7.2.0 <= 7.2.4)
Related
Weakness · CWE (1)
- CWE-835 Loop with Unreachable Exit Condition weakness
References
- https://fortiguard.com/psirt/FG-IR-22-375 Vendor Advisory
- https://fortiguard.com/psirt/FG-IR-22-375 Vendor Advisory