CVE-2019-16152

A Denial of service (DoS) vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to cause FortiClient processes running under root privilege crashes via sending specially crafted IPC client requests to the fctsched process due the nanomsg not been correctly validated.

Score

CVSS 3.1 6.5 Medium

Status

Modified - psirt@fortinet.com

Published

2020-02-06

Last modified

2024-10-25

Weaknesses

CWE-20

Affected products

• Forticlient (Fortinet)
• Fortinet Forticlientlinux (Fortinet)

References

• https://danishcyberdefence.dk/blog/forticlient_linux
• https://fortiguard.com/psirt/FG-IR-19-238