Heap buffer underflow in administrative interface

Heap buffer underflow in administrative interface Fortinet PSIRT Advisories Fortinet PSIRT Contact: Website: https://fortiguard.fortinet.com/faq/psirt-contact FG-IR-23-001 Final 1 1 2023-03-07T00:00:00 Current version 2023-03-07T00:00:00 2023-06-13T00:00:00 A buffer underwrite ("buffer underflow") vulnerability in FortiOS, FortiManager, FortiAnalyzer, FortiWeb, FortiProxy & FortiSwitchManager administrative interface may allow a remote unauthenticated attacker to execute arbitrary code on the device and/or perform a DoS on the GUI, via specifically crafted requests.Exploitation status:Fortinet is not aware of any instance where this vulnerability was exploited in the wild. We continuously review and test the security of our products, and this vulnerability was internally discovered within that frame. None Execute unauthorized code or commands Internally discovered and reported by Kai Ni from Burnaby InfoSec team. FortiAnalyzer 7.2.0 FortiAnalyzer 7.0.4 FortiAnalyzer 7.0.3 FortiAnalyzer 7.0.2 FortiAnalyzer 7.0.1 FortiAnalyzer 7.0.0 FortiAnalyzer 6.4.11 FortiAnalyzer 6.4.10 FortiAnalyzer 6.4.9 FortiAnalyzer 6.4.8 FortiAnalyzer 6.4.7 FortiAnalyzer 6.4.6 FortiAnalyzer 6.4.5 FortiAnalyzer 6.4.4 FortiAnalyzer 6.4.3 FortiAnalyzer 6.4.2 FortiAnalyzer 6.4.1 FortiAnalyzer 6.4.0 FortiAnalyzer 6.2.10 FortiAnalyzer 6.2.9 FortiAnalyzer 6.2.8 FortiAnalyzer 6.2.7 FortiAnalyzer 6.2.6 FortiAnalyzer 6.2.5 FortiAnalyzer 6.2.4 FortiAnalyzer 6.2.3 FortiAnalyzer 6.2.2 FortiAnalyzer 6.2.1 FortiAnalyzer 6.2.0 FortiAnalyzer 6.0.11 FortiAnalyzer 6.0.10 FortiAnalyzer 6.0.9 FortiAnalyzer 6.0.8 FortiAnalyzer 6.0.7 FortiAnalyzer 6.0.6 FortiAnalyzer 6.0.5 FortiAnalyzer 6.0.4 FortiAnalyzer 6.0.3 FortiAnalyzer 6.0.2 FortiAnalyzer 6.0.1 FortiAnalyzer 6.0.0 FortiManager 7.2.0 FortiManager 7.0.4 FortiManager 7.0.3 FortiManager 7.0.2 FortiManager 7.0.1 FortiManager 7.0.0 FortiManager 6.4.11 FortiManager 6.4.10 FortiManager 6.4.9 FortiManager 6.4.8 FortiManager 6.4.7 FortiManager 6.4.6 FortiManager 6.4.5 FortiManager 6.4.4 FortiManager 6.4.3 FortiManager 6.4.2 FortiManager 6.4.1 FortiManager 6.4.0 FortiManager 6.2.10 FortiManager 6.2.9 FortiManager 6.2.8 FortiManager 6.2.7 FortiManager 6.2.6 FortiManager 6.2.5 FortiManager 6.2.4 FortiManager 6.2.3 FortiManager 6.2.2 FortiManager 6.2.1 FortiManager 6.2.0 FortiManager 6.0.11 FortiManager 6.0.10 FortiManager 6.0.9 FortiManager 6.0.8 FortiManager 6.0.7 FortiManager 6.0.6 FortiManager 6.0.5 FortiManager 6.0.4 FortiManager 6.0.3 FortiManager 6.0.2 FortiManager 6.0.1 FortiManager 6.0.0 FortiOS 7.2.3 FortiOS 7.2.2 FortiOS 7.2.1 FortiOS 7.2.0 FortiOS 7.0.9 FortiOS 7.0.8 FortiOS 7.0.7 FortiOS 7.0.6 FortiOS 7.0.5 FortiOS 7.0.4 FortiOS 7.0.3 FortiOS 7.0.2 FortiOS 7.0.1 FortiOS 7.0.0 FortiOS 6.4.11 FortiOS 6.4.10 FortiOS 6.4.9 FortiOS 6.4.8 FortiOS 6.4.7 FortiOS 6.4.6 FortiOS 6.4.5 FortiOS 6.4.4 FortiOS 6.4.3 FortiOS 6.4.2 FortiOS 6.4.1 FortiOS 6.4.0 FortiOS 6.2.12 FortiOS 6.2.11 FortiOS 6.2.10 FortiOS 6.2.9 FortiOS 6.2.8 FortiOS 6.2.7 FortiOS 6.2.6 FortiOS 6.2.5 FortiOS 6.2.4 FortiOS 6.2.3 FortiOS 6.2.2 FortiOS 6.2.1 FortiOS 6.2.0 FortiOS 6.0.18 FortiOS 6.0.17 FortiOS 6.0.16 FortiOS 6.0.15 FortiOS 6.0.14 FortiOS 6.0.13 FortiOS 6.0.12 FortiOS 6.0.11 FortiOS 6.0.10 FortiOS 6.0.9 FortiOS 6.0.8 FortiOS 6.0.7 FortiOS 6.0.6 FortiOS 6.0.5 FortiOS 6.0.4 FortiOS 6.0.3 FortiOS 6.0.2 FortiOS 6.0.1 FortiOS 6.0.0 FortiOS 5.6.14 FortiOS 5.6.13 FortiOS 5.6.12 FortiOS 5.6.11 FortiOS 5.6.10 FortiOS 5.6.9 FortiOS 5.6.8 FortiOS 5.6.7 FortiOS 5.6.6 FortiOS 5.6.5 FortiOS 5.6.4 FortiOS 5.6.3 FortiOS 5.6.2 FortiOS 5.6.1 FortiOS 5.6.0 FortiOS 5.4.13 FortiOS 5.4.12 FortiOS 5.4.11 FortiOS 5.4.10 FortiOS 5.4.9 FortiOS 5.4.8 FortiOS 5.4.7 FortiOS 5.4.6 FortiOS 5.4.5 FortiOS 5.4.4 FortiOS 5.4.3 FortiOS 5.4.2 FortiOS 5.4.1 FortiOS 5.4.0 FortiOS 5.2.15 FortiOS 5.2.14 FortiOS 5.2.13 FortiOS 5.2.12 FortiOS 5.2.11 FortiOS 5.2.10 FortiOS 5.2.9 FortiOS 5.2.8 FortiOS 5.2.7 FortiOS 5.2.6 FortiOS 5.2.5 FortiOS 5.2.4 FortiOS 5.2.3 FortiOS 5.2.2 FortiOS 5.2.1 FortiOS 5.2.0 FortiOS 5.0.14 FortiOS 5.0.13 FortiOS 5.0.12 FortiOS 5.0.11 FortiOS 5.0.10 FortiOS 5.0.9 FortiOS 5.0.8 FortiOS 5.0.7 FortiOS 5.0.6 FortiOS 5.0.5 FortiOS 5.0.4 FortiOS 5.0.3 FortiOS 5.0.2 FortiOS 5.0.1 FortiOS 5.0.0 FortiOS-6K7K 7.0.5 FortiOS-6K7K 6.4.10 FortiOS-6K7K 6.4.8 FortiOS-6K7K 6.4.6 FortiOS-6K7K 6.4.2 FortiOS-6K7K 6.2.12 FortiOS-6K7K 6.2.11 FortiOS-6K7K 6.2.10 FortiOS-6K7K 6.2.9 FortiOS-6K7K 6.2.7 FortiOS-6K7K 6.2.6 FortiOS-6K7K 6.2.4 FortiOS-6K7K 6.0.18 FortiOS-6K7K 6.0.17 FortiOS-6K7K 6.0.16 FortiOS-6K7K 6.0.15 FortiOS-6K7K 6.0.14 FortiOS-6K7K 6.0.13 FortiOS-6K7K 6.0.12 FortiOS-6K7K 6.0.10 FortiProxy 7.2.2 FortiProxy 7.2.1 FortiProxy 7.2.0 FortiProxy 7.0.8 FortiProxy 7.0.7 FortiProxy 7.0.6 FortiProxy 7.0.5 FortiProxy 7.0.4 FortiProxy 7.0.3 FortiProxy 7.0.2 FortiProxy 7.0.1 FortiProxy 7.0.0 FortiProxy 2.0.14 FortiProxy 2.0.13 FortiProxy 2.0.12 FortiProxy 2.0.11 FortiProxy 2.0.10 FortiProxy 2.0.9 FortiProxy 2.0.8 FortiProxy 2.0.7 FortiProxy 2.0.6 FortiProxy 2.0.5 FortiProxy 2.0.4 FortiProxy 2.0.3 FortiProxy 2.0.2 FortiProxy 2.0.1 FortiProxy 2.0.0 FortiProxy 1.2.13 FortiProxy 1.2.12 FortiProxy 1.2.11 FortiProxy 1.2.10 FortiProxy 1.2.9 FortiProxy 1.2.8 FortiProxy 1.2.7 FortiProxy 1.2.6 FortiProxy 1.2.5 FortiProxy 1.2.4 FortiProxy 1.2.3 FortiProxy 1.2.2 FortiProxy 1.2.1 FortiProxy 1.2.0 FortiProxy 1.1.6 FortiProxy 1.1.5 FortiProxy 1.1.4 FortiProxy 1.1.3 FortiProxy 1.1.2 FortiProxy 1.1.1 FortiProxy 1.1.0 FortiSwitch 7.2.3 FortiSwitch 7.2.2 FortiSwitch 7.2.1 FortiSwitch 7.2.0 FortiSwitch 7.0.6 FortiSwitch 7.0.5 FortiSwitch 7.0.4 FortiSwitch 7.0.3 FortiSwitch 7.0.2 FortiSwitch 7.0.1 FortiSwitch 7.0.0 FortiSwitch 6.4.15 FortiSwitch 6.4.14 FortiSwitch 6.4.13 FortiSwitch 6.4.12 FortiSwitch 6.4.11 FortiSwitch 6.4.10 FortiSwitch 6.4.9 FortiSwitch 6.4.8 FortiSwitch 6.4.7 FortiSwitch 6.4.6 FortiSwitch 6.4.5 FortiSwitch 6.4.4 FortiSwitch 6.4.3 FortiSwitch 6.4.2 FortiSwitch 6.4.1 FortiSwitch 6.4.0 FortiSwitchManager 7.2.1 FortiSwitchManager 7.2.0 FortiSwitchManager 7.0.1 FortiSwitchManager 7.0.0 FortiWeb 7.2.1 FortiWeb 7.2.0 FortiWeb 7.0.6 FortiWeb 7.0.5 FortiWeb 7.0.4 FortiWeb 7.0.3 FortiWeb 7.0.2 FortiWeb 7.0.1 FortiWeb 7.0.0 FortiWeb 6.4.2 FortiWeb 6.4.1 FortiWeb 6.4.0 FortiWeb 6.3.22 FortiWeb 6.3.21 FortiWeb 6.3.20 FortiWeb 6.3.19 FortiWeb 6.3.18 FortiWeb 6.3.17 FortiWeb 6.3.16 FortiWeb 6.3.15 FortiWeb 6.3.14 FortiWeb 6.3.13 FortiWeb 6.3.12 FortiWeb 6.3.11 FortiWeb 6.3.10 FortiWeb 6.3.9 FortiWeb 6.3.8 FortiWeb 6.3.7 FortiWeb 6.3.6 FortiWeb 6.3.5 FortiWeb 6.3.4 FortiWeb 6.3.3 FortiWeb 6.3.2 FortiWeb 6.3.1 FortiWeb 6.3.0 FortiWeb 6.2.7 FortiWeb 6.2.6 FortiWeb 6.2.5 FortiWeb 6.2.4 FortiWeb 6.2.3 FortiWeb 6.2.2 FortiWeb 6.2.1 FortiWeb 6.2.0 FortiWeb 6.1.3 FortiWeb 6.1.2 FortiWeb 6.1.1 FortiWeb 6.1.0 Heap buffer underflow in administrative interface CVE-2023-25610 FortiAnalyzer-7.2.0 FortiAnalyzer-7.0.4 FortiAnalyzer-7.0.3 FortiAnalyzer-7.0.2 FortiAnalyzer-7.0.1 FortiAnalyzer-7.0.0 FortiAnalyzer-6.4.11 FortiAnalyzer-6.4.10 FortiAnalyzer-6.4.9 FortiAnalyzer-6.4.8 FortiAnalyzer-6.4.7 FortiAnalyzer-6.4.6 FortiAnalyzer-6.4.5 FortiAnalyzer-6.4.4 FortiAnalyzer-6.4.3 FortiAnalyzer-6.4.2 FortiAnalyzer-6.4.1 FortiAnalyzer-6.4.0 FortiAnalyzer-6.2.10 FortiAnalyzer-6.2.9 FortiAnalyzer-6.2.8 FortiAnalyzer-6.2.7 FortiAnalyzer-6.2.6 FortiAnalyzer-6.2.5 FortiAnalyzer-6.2.4 FortiAnalyzer-6.2.3 FortiAnalyzer-6.2.2 FortiAnalyzer-6.2.1 FortiAnalyzer-6.2.0 FortiAnalyzer-6.0.11 FortiAnalyzer-6.0.10 FortiAnalyzer-6.0.9 FortiAnalyzer-6.0.8 FortiAnalyzer-6.0.7 FortiAnalyzer-6.0.6 FortiAnalyzer-6.0.5 FortiAnalyzer-6.0.4 FortiAnalyzer-6.0.3 FortiAnalyzer-6.0.2 FortiAnalyzer-6.0.1 FortiAnalyzer-6.0.0 FortiManager-7.2.0 FortiManager-7.0.4 FortiManager-7.0.3 FortiManager-7.0.2 FortiManager-7.0.1 FortiManager-7.0.0 FortiManager-6.4.11 FortiManager-6.4.10 FortiManager-6.4.9 FortiManager-6.4.8 FortiManager-6.4.7 FortiManager-6.4.6 FortiManager-6.4.5 FortiManager-6.4.4 FortiManager-6.4.3 FortiManager-6.4.2 FortiManager-6.4.1 FortiManager-6.4.0 FortiManager-6.2.10 FortiManager-6.2.9 FortiManager-6.2.8 FortiManager-6.2.7 FortiManager-6.2.6 FortiManager-6.2.5 FortiManager-6.2.4 FortiManager-6.2.3 FortiManager-6.2.2 FortiManager-6.2.1 FortiManager-6.2.0 FortiManager-6.0.11 FortiManager-6.0.10 FortiManager-6.0.9 FortiManager-6.0.8 FortiManager-6.0.7 FortiManager-6.0.6 FortiManager-6.0.5 FortiManager-6.0.4 FortiManager-6.0.3 FortiManager-6.0.2 FortiManager-6.0.1 FortiManager-6.0.0 FortiOS-7.2.3 FortiOS-7.2.2 FortiOS-7.2.1 FortiOS-7.2.0 FortiOS-7.0.9 FortiOS-7.0.8 FortiOS-7.0.7 FortiOS-7.0.6 FortiOS-7.0.5 FortiOS-7.0.4 FortiOS-7.0.3 FortiOS-7.0.2 FortiOS-7.0.1 FortiOS-7.0.0 FortiOS-6.4.11 FortiOS-6.4.10 FortiOS-6.4.9 FortiOS-6.4.8 FortiOS-6.4.7 FortiOS-6.4.6 FortiOS-6.4.5 FortiOS-6.4.4 FortiOS-6.4.3 FortiOS-6.4.2 FortiOS-6.4.1 FortiOS-6.4.0 FortiOS-6.2.12 FortiOS-6.2.11 FortiOS-6.2.10 FortiOS-6.2.9 FortiOS-6.2.8 FortiOS-6.2.7 FortiOS-6.2.6 FortiOS-6.2.5 FortiOS-6.2.4 FortiOS-6.2.3 FortiOS-6.2.2 FortiOS-6.2.1 FortiOS-6.2.0 FortiOS-6.0.18 FortiOS-6.0.17 FortiOS-6.0.16 FortiOS-6.0.15 FortiOS-6.0.14 FortiOS-6.0.13 FortiOS-6.0.12 FortiOS-6.0.11 FortiOS-6.0.10 FortiOS-6.0.9 FortiOS-6.0.8 FortiOS-6.0.7 FortiOS-6.0.6 FortiOS-6.0.5 FortiOS-6.0.4 FortiOS-6.0.3 FortiOS-6.0.2 FortiOS-6.0.1 FortiOS-6.0.0 FortiOS-5.6.14 FortiOS-5.6.13 FortiOS-5.6.12 FortiOS-5.6.11 FortiOS-5.6.10 FortiOS-5.6.9 FortiOS-5.6.8 FortiOS-5.6.7 FortiOS-5.6.6 FortiOS-5.6.5 FortiOS-5.6.4 FortiOS-5.6.3 FortiOS-5.6.2 FortiOS-5.6.1 FortiOS-5.6.0 FortiOS-5.4.13 FortiOS-5.4.12 FortiOS-5.4.11 FortiOS-5.4.10 FortiOS-5.4.9 FortiOS-5.4.8 FortiOS-5.4.7 FortiOS-5.4.6 FortiOS-5.4.5 FortiOS-5.4.4 FortiOS-5.4.3 FortiOS-5.4.2 FortiOS-5.4.1 FortiOS-5.4.0 FortiOS-5.2.15 FortiOS-5.2.14 FortiOS-5.2.13 FortiOS-5.2.12 FortiOS-5.2.11 FortiOS-5.2.10 FortiOS-5.2.9 FortiOS-5.2.8 FortiOS-5.2.7 FortiOS-5.2.6 FortiOS-5.2.5 FortiOS-5.2.4 FortiOS-5.2.3 FortiOS-5.2.2 FortiOS-5.2.1 FortiOS-5.2.0 FortiOS-5.0.14 FortiOS-5.0.13 FortiOS-5.0.12 FortiOS-5.0.11 FortiOS-5.0.10 FortiOS-5.0.9 FortiOS-5.0.8 FortiOS-5.0.7 FortiOS-5.0.6 FortiOS-5.0.5 FortiOS-5.0.4 FortiOS-5.0.3 FortiOS-5.0.2 FortiOS-5.0.1 FortiOS-5.0.0 FortiOS-6K7K-7.0.5 FortiOS-6K7K-6.4.10 FortiOS-6K7K-6.4.8 FortiOS-6K7K-6.4.6 FortiOS-6K7K-6.4.2 FortiOS-6K7K-6.2.12 FortiOS-6K7K-6.2.11 FortiOS-6K7K-6.2.10 FortiOS-6K7K-6.2.9 FortiOS-6K7K-6.2.7 FortiOS-6K7K-6.2.6 FortiOS-6K7K-6.2.4 FortiOS-6K7K-6.0.18 FortiOS-6K7K-6.0.17 FortiOS-6K7K-6.0.16 FortiOS-6K7K-6.0.15 FortiOS-6K7K-6.0.14 FortiOS-6K7K-6.0.13 FortiOS-6K7K-6.0.12 FortiOS-6K7K-6.0.10 FortiProxy-7.2.2 FortiProxy-7.2.1 FortiProxy-7.2.0 FortiProxy-7.0.8 FortiProxy-7.0.7 FortiProxy-7.0.6 FortiProxy-7.0.5 FortiProxy-7.0.4 FortiProxy-7.0.3 FortiProxy-7.0.2 FortiProxy-7.0.1 FortiProxy-7.0.0 FortiProxy-2.0.14 FortiProxy-2.0.13 FortiProxy-2.0.12 FortiProxy-2.0.11 FortiProxy-2.0.10 FortiProxy-2.0.9 FortiProxy-2.0.8 FortiProxy-2.0.7 FortiProxy-2.0.6 FortiProxy-2.0.5 FortiProxy-2.0.4 FortiProxy-2.0.3 FortiProxy-2.0.2 FortiProxy-2.0.1 FortiProxy-2.0.0 FortiProxy-1.2.13 FortiProxy-1.2.12 FortiProxy-1.2.11 FortiProxy-1.2.10 FortiProxy-1.2.9 FortiProxy-1.2.8 FortiProxy-1.2.7 FortiProxy-1.2.6 FortiProxy-1.2.5 FortiProxy-1.2.4 FortiProxy-1.2.3 FortiProxy-1.2.2 FortiProxy-1.2.1 FortiProxy-1.2.0 FortiProxy-1.1.6 FortiProxy-1.1.5 FortiProxy-1.1.4 FortiProxy-1.1.3 FortiProxy-1.1.2 FortiProxy-1.1.1 FortiProxy-1.1.0 FortiSwitch-7.2.3 FortiSwitch-7.2.2 FortiSwitch-7.2.1 FortiSwitch-7.2.0 FortiSwitch-7.0.6 FortiSwitch-7.0.5 FortiSwitch-7.0.4 FortiSwitch-7.0.3 FortiSwitch-7.0.2 FortiSwitch-7.0.1 FortiSwitch-7.0.0 FortiSwitch-6.4.15 FortiSwitch-6.4.14 FortiSwitch-6.4.13 FortiSwitch-6.4.12 FortiSwitch-6.4.11 FortiSwitch-6.4.10 FortiSwitch-6.4.9 FortiSwitch-6.4.8 FortiSwitch-6.4.7 FortiSwitch-6.4.6 FortiSwitch-6.4.5 FortiSwitch-6.4.4 FortiSwitch-6.4.3 FortiSwitch-6.4.2 FortiSwitch-6.4.1 FortiSwitch-6.4.0 FortiSwitchManager-7.2.1 FortiSwitchManager-7.2.0 FortiSwitchManager-7.0.1 FortiSwitchManager-7.0.0 FortiWeb-7.2.1 FortiWeb-7.2.0 FortiWeb-7.0.6 FortiWeb-7.0.5 FortiWeb-7.0.4 FortiWeb-7.0.3 FortiWeb-7.0.2 FortiWeb-7.0.1 FortiWeb-7.0.0 FortiWeb-6.4.2 FortiWeb-6.4.1 FortiWeb-6.4.0 FortiWeb-6.3.22 FortiWeb-6.3.21 FortiWeb-6.3.20 FortiWeb-6.3.19 FortiWeb-6.3.18 FortiWeb-6.3.17 FortiWeb-6.3.16 FortiWeb-6.3.15 FortiWeb-6.3.14 FortiWeb-6.3.13 FortiWeb-6.3.12 FortiWeb-6.3.11 FortiWeb-6.3.10 FortiWeb-6.3.9 FortiWeb-6.3.8 FortiWeb-6.3.7 FortiWeb-6.3.6 FortiWeb-6.3.5 FortiWeb-6.3.4 FortiWeb-6.3.3 FortiWeb-6.3.2 FortiWeb-6.3.1 FortiWeb-6.3.0 FortiWeb-6.2.7 FortiWeb-6.2.6 FortiWeb-6.2.5 FortiWeb-6.2.4 FortiWeb-6.2.3 FortiWeb-6.2.2 FortiWeb-6.2.1 FortiWeb-6.2.0 FortiWeb-6.1.3 FortiWeb-6.1.2 FortiWeb-6.1.1 FortiWeb-6.1.0 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C https://fortiguard.fortinet.com/psirt/FG-IR-23-001 Heap buffer underflow in administrative interface Reference>