PT-2023-6002 · Fortinet · Fortiproxy+1

Published 2023-10-10 · Updated 2023-10-13 · CVE-2023-41675

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FortiOS versions 7.0.0 through 7.0.10 FortiOS versions 7.2.0 through 7.2.4 FortiProxy versions 7.0.0 through 7.0.8 FortiProxy versions 7.2.0 through 7.2.2

Description A use after free vulnerability in FortiOS and FortiProxy may allow an unauthenticated remote attacker to crash the WAD process via multiple crafted packets reaching proxy policies or firewall policies with proxy mode alongside SSL deep packet inspection. The vulnerability is related to the use of memory after it has been freed, which can be exploited by sending specially crafted packets.

Recommendations For FortiOS versions 7.0.0 through 7.0.10, update to a version that contains a fix for this issue. For FortiOS versions 7.2.0 through 7.2.4, update to a version that contains a fix for this issue. For FortiProxy versions 7.0.0 through 7.0.8, update to a version that contains a fix for this issue. For FortiProxy versions 7.2.0 through 7.2.2, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting access to proxy policies or firewall policies with proxy mode alongside SSL deep packet inspection until a patch is available.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2023-06703

CVE-2023-41675

Affected Products

Fortios

Fortiproxy

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-41675 · Security Note
• https://fortiguard.com/psirt/FG-IR-23-184 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-41675 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-06703 · Security Note
• https://t.me/cibsecurity/71965 · Telegram Post
• https://t.me/cvenotify/59198 · Telegram Post