CVE-2023-29179

MEDIUM

FortiOS 6.4.0-6.4.12, 7.0.0-7.0.11, 7.2.0-7.2.4 & FortiProxy 7.0.0-7.0.10, 7.2.0-7.2.4 DoS via HTTP Requests

Title source: llm

Description

A null pointer dereference in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, Fortiproxy version 7.2.0 through 7.2.4, 7.0.0 through 7.0.10 allows attacker to denial of service via specially crafted HTTP requests.

References (1)

Core 1

Core References

Vendor Advisory

https://fortiguard.com/psirt/FG-IR-23-125

Scores

CVSS v3 6.5

EPSS 0.0066

EPSS Percentile 71.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-476

Status published

Products (2)

fortinet/fortios 6.4.0 - 6.4.13

fortinet/fortiproxy 7.0.0 - 7.0.11

Published Feb 22, 2024

Tracked Since Feb 18, 2026