PT-2020-19352 · Fortinet+2 · Openfortivpn+2

Agustingianni · Published 2020-02-27 · Updated 2024-06-15 · CVE-2020-7042

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions openfortivpn version 1.11.0

Description An issue in openfortivpn, when used with OpenSSL 1.0.2 or later, causes the tunnel.c component to mishandle certificate validation. This occurs because the hostname check operates on uninitialized memory, resulting in a valid certificate never being accepted, while a malformed certificate may be accepted.

Recommendations For openfortivpn version 1.11.0, consider updating to a newer version that addresses the certificate validation issue, as the current version may not properly accept valid certificates due to the mishandling of certificate validation in the tunnel.c component.

Fix

Use of Uninitialized Resource

Improper Certificate Validation

Weakness Enumeration

CWE-908

CWE-295

Related Identifiers

CVE-2020-7042

OPENSUSE-SU-2020:0301-1

OPENSUSE-SU-2020:0305-1

OPENSUSE-SU-2020_0301-1

OPENSUSE-SU-2024:11118-1

Affected Products

Openssl

Suse

Openfortivpn

References · 26

• https://github.com/adrienverge/openfortivpn/commit/cd9368c6a1b4ef91d77bb3fdbe2e5bc34aa6f4c4 · Patch
• https://github.com/adrienverge/openfortivpn/commit/9eee997d599a89492281fc7ffdd79d88cd61afc3 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2020:0305-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11118-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-7042 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-7042 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-7042 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-7042 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FF6HYIBREQGATRM5COF57MRQWKOKCWZ3 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SRVVNXCNTNMPCIAZIVR4FAGYCSU53FNA · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00011.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00009.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-7042 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7042 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-7042 · Vendor Advisory