high7.5
CVE-2022-29055
A access of uninitialized pointer in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0 through 6.4.8, 6.2.0 through 6.2.10, 6.0.x, FortiProxy version …
Impact
A access of uninitialized pointer in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0 through 6.4.8, 6.2.0 through 6.2.10, 6.0.x, FortiProxy version 7.0.0 through 7.0.4, 2.0.0 through 2.0.9, 1.2.x allows a remote unauthenticated or authenticated attacker to crash the sslvpn daemon via an HTTP GET request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortiproxy | from 1.2.6 before 1.2.13 from 2.0.0 before 2.0.10 from 7.0.0 before 7.0.7 Version 7.2.0 |
| Fortinet | Fortios | from 6.2.0 before 6.2.11 from 6.4.0 before 6.4.10 from 7.0.0 before 7.0.7 Version 7.2.0 |