FortiPortal - Uncontrolled memory allocation

2021-11-0200:00:00

FortiGuard Labs

www.fortiguard.com

0.001 Low

EPSS

Percentile

38.9%

JSON

A memory allocation with excessive size value vulnerability [CWE-789] in the license verification function of FortiPortal may allow an attacker to perform a denial of service attack via specially crafted license blobs.

CPENameOperatorVersion
fortiportaleq6.0.5
fortiportaleq6.0.4
fortiportaleq6.0.3
fortiportaleq6.0.2
fortiportaleq6.0.1
fortiportaleq6.0.0
fortiportaleq5.3.6
fortiportaleq5.3.5
fortiportaleq5.3.4
fortiportaleq5.3.3

Name	Operator	Version
fortiportal	eq	6.0.5
fortiportal	eq	6.0.4
fortiportal	eq	6.0.3
fortiportal	eq	6.0.2
fortiportal	eq	6.0.1
fortiportal	eq	6.0.0
fortiportal	eq	5.3.6
fortiportal	eq	5.3.5
fortiportal	eq	5.3.4
fortiportal	eq	5.3.3

Rows per page:

1-10 of 371

0.001 Low

EPSS

Percentile

38.9%

JSON

Related for FG-IR-21-109