CVE-2018-13383

Fortinet FortiOS and FortiProxy Out-of-bounds Write

Fortiproxy

A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier and FortiProxy 2.0.0, 1.2.8 and earlier in the SSL VPN web portal may cause the SSL VPN web service termination for logged in users due to a failure to properly handle javascript href data when proxying webpages.

29. Mai 2019

Ausgewertete Quellen

• Hersteller
  https://fortiguard.com/advisory/FG-IR-18-388
• Hersteller
  https://fortiguard.com/advisory/FG-IR-20-229
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-13383
• CISA
  Fortinet FortiOS and FortiProxy Out-of-bounds Write
• NVD
  CVE-2018-13383