FortiWeb - Stack-based buffer overflows in Proxyd

2023-02-1600:00:00

FortiGuard Labs

www.fortiguard.com

fortiweb

proxyd

buffer overflow

cwe-121

remote attacker

http requests

0.002 Low

EPSS

Percentile

52.7%

JSON

Multiple stack-based buffer overflow vulnerabilitiesÂ [CWE-121] in FortiWeb’s proxy daemon may allow an unauthenticated remote attacker to achieve arbitrary code execution via specifically crafted HTTP requests.

CPENameOperatorVersion
fortiwebeq6.4.2
fortiwebeq6.4.1
fortiwebeq6.4.0
fortiwebeq6.3.9
fortiwebeq6.3.8
fortiwebeq6.3.7
fortiwebeq6.3.6
fortiwebeq6.3.5
fortiwebeq6.3.4
fortiwebeq6.3.3

Name	Operator	Version
fortiweb	eq	6.4.2
fortiweb	eq	6.4.1
fortiweb	eq	6.4.0
fortiweb	eq	6.3.9
fortiweb	eq	6.3.8
fortiweb	eq	6.3.7
fortiweb	eq	6.3.6
fortiweb	eq	6.3.5
fortiweb	eq	6.3.4
fortiweb	eq	6.3.3

Rows per page:

1-10 of 541

0.002 Low

EPSS

Percentile

52.7%

JSON

Related for FG-IR-21-186