CVE-2018-13381

A buffer overflow vulnerability in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.7, 5.4 and earlier versions and FortiProxy 2.0.0, 1.2.8 and earlier versions under SSL VPN web portal allows a non-authenticated attacker to perform a Denial-of-service attack via special craft message payloads.

Score

CVSS 3.1 7.5 High

Status

Modified - psirt@fortinet.com

Published

2019-06-04

Last modified

2024-10-25

Weaknesses

CWE-119

Affected products

• Fortinet Fortios And Fortiproxy (Fortinet)
• Fortios (Fortinet)
• Fortiproxy (Fortinet)

References

• https://fortiguard.com/advisory/FG-IR-18-387
• https://fortiguard.com/advisory/FG-IR-20-232