Use after free vulnerability in fgfmsd daemon
Fortinet PSIRT Advisories
Fortinet PSIRT Contact:
Website: https://fortiguard.fortinet.com/faq/psirt-contact
FG-IR-21-067
Final
1
1
2021-07-19T00:00:00
Current version
2021-07-19T00:00:00
2021-07-19T00:00:00
A Use After Free (CWE-416) vulnerability in FortiManager and FortiAnalyzer fgfmsd daemon may allow a remote, non-authenticated attacker to execute unauthorized code as root via sending a specifically crafted request to the fgfm port of the targeted device.Please note that FGFM is disabled by default on FortiAnalyzer and can only be enabled on specific hardware models:1000D, 1000E, 2000E, 3000D, 3000E, 3000F, 3500E, 3500F, 3700F, 3900E.
Execute unauthorized code or commands
Fortinet is pleased to thank Cyrille Chatras of Orange Group for brining this issue to our attention under responsible disclosure.
FortiAnalyzer 7.0.0
FortiAnalyzer 6.4.5
FortiAnalyzer 6.4.4
FortiAnalyzer 6.4.3
FortiAnalyzer 6.4.2
FortiAnalyzer 6.4.1
FortiAnalyzer 6.4.0
FortiAnalyzer 6.2.7
FortiAnalyzer 6.2.6
FortiAnalyzer 6.2.5
FortiAnalyzer 6.2.4
FortiAnalyzer 6.2.3
FortiAnalyzer 6.2.2
FortiAnalyzer 6.2.1
FortiAnalyzer 6.2.0
FortiAnalyzer 6.0.10
FortiAnalyzer 6.0.9
FortiAnalyzer 6.0.8
FortiAnalyzer 6.0.7
FortiAnalyzer 6.0.6
FortiAnalyzer 6.0.5
FortiAnalyzer 6.0.4
FortiAnalyzer 6.0.3
FortiAnalyzer 6.0.2
FortiAnalyzer 6.0.1
FortiAnalyzer 6.0.0
FortiAnalyzer 5.6.10
FortiAnalyzer 5.6.9
FortiAnalyzer 5.6.8
FortiAnalyzer 5.6.7
FortiAnalyzer 5.6.6
FortiAnalyzer 5.6.5
FortiAnalyzer 5.6.4
FortiAnalyzer 5.6.3
FortiAnalyzer 5.6.2
FortiAnalyzer 5.6.1
FortiAnalyzer 5.6.0
FortiAnalyzer 5.4.7
FortiAnalyzer 5.4.6
FortiAnalyzer 5.4.5
FortiAnalyzer 5.4.4
FortiAnalyzer 5.4.3
FortiAnalyzer 5.4.2
FortiAnalyzer 5.4.1
FortiAnalyzer 5.4.0
FortiAnalyzer 5.3.11
FortiAnalyzer 5.2.10
FortiAnalyzer 5.2.9
FortiAnalyzer 5.2.8
FortiAnalyzer 5.2.7
FortiAnalyzer 5.2.6
FortiAnalyzer 5.2.5
FortiAnalyzer 5.2.4
FortiManager 7.0.0
FortiManager 6.4.5
FortiManager 6.4.4
FortiManager 6.4.3
FortiManager 6.4.2
FortiManager 6.4.1
FortiManager 6.4.0
FortiManager 6.2.7
FortiManager 6.2.6
FortiManager 6.2.5
FortiManager 6.2.4
FortiManager 6.2.3
FortiManager 6.2.2
FortiManager 6.2.1
FortiManager 6.2.0
FortiManager 6.0.10
FortiManager 6.0.9
FortiManager 6.0.8
FortiManager 6.0.7
FortiManager 6.0.6
FortiManager 6.0.5
FortiManager 6.0.4
FortiManager 6.0.3
FortiManager 6.0.2
FortiManager 6.0.1
FortiManager 6.0.0
FortiManager 5.6.10
FortiManager 5.6.9
FortiManager 5.6.8
FortiManager 5.6.7
FortiManager 5.6.6
FortiManager 5.6.5
FortiManager 5.6.4
FortiManager 5.6.3
FortiManager 5.6.2
FortiManager 5.6.1
FortiManager 5.6.0
FortiManager 5.4.7
FortiManager 5.4.6
FortiManager 5.4.5
FortiManager 5.4.4
FortiManager 5.4.3
FortiManager 5.4.2
FortiManager 5.4.1
FortiManager 5.4.0
FortiManager 5.2.10
FortiManager 5.2.9
FortiManager 5.2.8
FortiManager 5.2.7
FortiManager 5.2.6
FortiManager 5.2.5
FortiManager 5.2.4
FortiManager 5.2.3
FortiManager 5.2.2
FortiManager 5.2.1
FortiManager 5.2.0
FortiManager 5.0.12
FortiManager 5.0.11
FortiManager 5.0.10
FortiManager 5.0.9
FortiManager 5.0.8
FortiManager 5.0.7
FortiManager 5.0.6
FortiManager 5.0.5
FortiManager 5.0.4
FortiManager 5.0.3
FortiManager 5.0.2
FortiManager 5.0.1
FortiManager 5.0.0
FortiPortal 6.0.4
FortiPortal 6.0.3
FortiPortal 6.0.2
FortiPortal 6.0.1
FortiPortal 6.0.0
FortiPortal 5.3.6
FortiPortal 5.3.5
FortiPortal 5.3.4
FortiPortal 5.3.3
FortiPortal 5.3.2
FortiPortal 5.3.1
FortiPortal 5.3.0
FortiPortal 5.2.6
FortiPortal 5.2.5
FortiPortal 5.2.4
FortiPortal 5.2.3
FortiPortal 5.2.2
FortiPortal 5.2.1
FortiPortal 5.2.0
FortiPortal 5.1.2
FortiPortal 5.1.1
FortiPortal 5.1.0
FortiPortal 5.0.3
FortiPortal 5.0.2
FortiPortal 5.0.1
FortiPortal 5.0.0
FortiPortal 4.2.2
FortiPortal 4.2.1
FortiPortal 4.1.2
FortiPortal 4.1.1
FortiPortal 4.1.0
FortiPortal 4.0.4
FortiPortal 4.0.3
FortiPortal 4.0.2
FortiPortal 4.0.1
FortiPortal 4.0.0
Use after free vulnerability in fgfmsd daemon
CVE-2021-32589
FortiAnalyzer-7.0.0
FortiAnalyzer-6.4.5
FortiAnalyzer-6.4.4
FortiAnalyzer-6.4.3
FortiAnalyzer-6.4.2
FortiAnalyzer-6.4.1
FortiAnalyzer-6.4.0
FortiAnalyzer-6.2.7
FortiAnalyzer-6.2.6
FortiAnalyzer-6.2.5
FortiAnalyzer-6.2.4
FortiAnalyzer-6.2.3
FortiAnalyzer-6.2.2
FortiAnalyzer-6.2.1
FortiAnalyzer-6.2.0
FortiAnalyzer-6.0.10
FortiAnalyzer-6.0.9
FortiAnalyzer-6.0.8
FortiAnalyzer-6.0.7
FortiAnalyzer-6.0.6
FortiAnalyzer-6.0.5
FortiAnalyzer-6.0.4
FortiAnalyzer-6.0.3
FortiAnalyzer-6.0.2
FortiAnalyzer-6.0.1
FortiAnalyzer-6.0.0
FortiAnalyzer-5.6.10
FortiAnalyzer-5.6.9
FortiAnalyzer-5.6.8
FortiAnalyzer-5.6.7
FortiAnalyzer-5.6.6
FortiAnalyzer-5.6.5
FortiAnalyzer-5.6.4
FortiAnalyzer-5.6.3
FortiAnalyzer-5.6.2
FortiAnalyzer-5.6.1
FortiAnalyzer-5.6.0
FortiAnalyzer-5.4.7
FortiAnalyzer-5.4.6
FortiAnalyzer-5.4.5
FortiAnalyzer-5.4.4
FortiAnalyzer-5.4.3
FortiAnalyzer-5.4.2
FortiAnalyzer-5.4.1
FortiAnalyzer-5.4.0
FortiAnalyzer-5.3.11
FortiAnalyzer-5.2.10
FortiAnalyzer-5.2.9
FortiAnalyzer-5.2.8
FortiAnalyzer-5.2.7
FortiAnalyzer-5.2.6
FortiAnalyzer-5.2.5
FortiAnalyzer-5.2.4
FortiManager-7.0.0
FortiManager-6.4.5
FortiManager-6.4.4
FortiManager-6.4.3
FortiManager-6.4.2
FortiManager-6.4.1
FortiManager-6.4.0
FortiManager-6.2.7
FortiManager-6.2.6
FortiManager-6.2.5
FortiManager-6.2.4
FortiManager-6.2.3
FortiManager-6.2.2
FortiManager-6.2.1
FortiManager-6.2.0
FortiManager-6.0.10
FortiManager-6.0.9
FortiManager-6.0.8
FortiManager-6.0.7
FortiManager-6.0.6
FortiManager-6.0.5
FortiManager-6.0.4
FortiManager-6.0.3
FortiManager-6.0.2
FortiManager-6.0.1
FortiManager-6.0.0
FortiManager-5.6.10
FortiManager-5.6.9
FortiManager-5.6.8
FortiManager-5.6.7
FortiManager-5.6.6
FortiManager-5.6.5
FortiManager-5.6.4
FortiManager-5.6.3
FortiManager-5.6.2
FortiManager-5.6.1
FortiManager-5.6.0
FortiManager-5.4.7
FortiManager-5.4.6
FortiManager-5.4.5
FortiManager-5.4.4
FortiManager-5.4.3
FortiManager-5.4.2
FortiManager-5.4.1
FortiManager-5.4.0
FortiManager-5.2.10
FortiManager-5.2.9
FortiManager-5.2.8
FortiManager-5.2.7
FortiManager-5.2.6
FortiManager-5.2.5
FortiManager-5.2.4
FortiManager-5.2.3
FortiManager-5.2.2
FortiManager-5.2.1
FortiManager-5.2.0
FortiManager-5.0.12
FortiManager-5.0.11
FortiManager-5.0.10
FortiManager-5.0.9
FortiManager-5.0.8
FortiManager-5.0.7
FortiManager-5.0.6
FortiManager-5.0.5
FortiManager-5.0.4
FortiManager-5.0.3
FortiManager-5.0.2
FortiManager-5.0.1
FortiManager-5.0.0
FortiPortal-6.0.4
FortiPortal-6.0.3
FortiPortal-6.0.2
FortiPortal-6.0.1
FortiPortal-6.0.0
FortiPortal-5.3.6
FortiPortal-5.3.5
FortiPortal-5.3.4
FortiPortal-5.3.3
FortiPortal-5.3.2
FortiPortal-5.3.1
FortiPortal-5.3.0
FortiPortal-5.2.6
FortiPortal-5.2.5
FortiPortal-5.2.4
FortiPortal-5.2.3
FortiPortal-5.2.2
FortiPortal-5.2.1
FortiPortal-5.2.0
FortiPortal-5.1.2
FortiPortal-5.1.1
FortiPortal-5.1.0
FortiPortal-5.0.3
FortiPortal-5.0.2
FortiPortal-5.0.1
FortiPortal-5.0.0
FortiPortal-4.2.2
FortiPortal-4.2.1
FortiPortal-4.1.2
FortiPortal-4.1.1
FortiPortal-4.1.0
FortiPortal-4.0.4
FortiPortal-4.0.3
FortiPortal-4.0.2
FortiPortal-4.0.1
FortiPortal-4.0.0
7.7
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:W/RC:C
https://fortiguard.fortinet.com/psirt/FG-IR-21-067
Use after free vulnerability in fgfmsd daemon
Reference>