Buffer overflow in execute extender command

Buffer overflow in execute extender command Fortinet PSIRT Advisories Fortinet PSIRT Contact: Website: https://fortiguard.fortinet.com/faq/psirt-contact FG-IR-23-149 Final 1 1 2023-08-17T00:00:00 Current version 2023-08-17T00:00:00 2023-08-17T00:00:00 A stack-based buffer overflow vulnerability [CWE-121] in FortiOS may allow a privileged attacker to execute arbitrary code via specially crafted CLI commands, provided the attacker were able to evade FortiOS stack protections. None Execute unauthorized code or commands FortiOS 7.4 all versions are not affectedFortiOS 7.2 all versions are not affectedFortiOS version 7.0.0 through 7.0.3FortiOS 6.4 all versionsFortiOS 6.2 all versions Please upgrade to FortiOS version 7.4.0 or abovePlease upgrade to FortiOS version 7.2.0 or abovePlease upgrade to FortiOS version 7.0.4 or abovePlease upgrade to the FortiOS upcoming version 6.4.15 or above https://fortiguard.fortinet.com/psirt/FG-IR-23-149 Buffer overflow in execute extender command [1] https://code610.blogspot.com/2023/04/fuzzing-fortigate-7.html [1] https://code610.blogspot.com/2023/04/fuzzing-fortigate-7.html FortiOS 7.0.3 FortiOS 7.0.2 FortiOS 7.0.1 FortiOS 7.0.0 FortiOS 6.4.16 FortiOS 6.4.15 FortiOS 6.4.14 FortiOS 6.4.13 FortiOS 6.4.12 FortiOS 6.4.11 FortiOS 6.4.10 FortiOS 6.4.9 FortiOS 6.4.8 FortiOS 6.4.7 FortiOS 6.4.6 FortiOS 6.4.5 FortiOS 6.4.4 FortiOS 6.4.3 FortiOS 6.4.2 FortiOS 6.4.1 FortiOS 6.4.0 FortiOS 6.2.17 FortiOS 6.2.16 FortiOS 6.2.15 FortiOS 6.2.14 FortiOS 6.2.13 FortiOS 6.2.12 FortiOS 6.2.11 FortiOS 6.2.10 FortiOS 6.2.9 FortiOS 6.2.8 FortiOS 6.2.7 FortiOS 6.2.6 FortiOS 6.2.5 FortiOS 6.2.4 FortiOS 6.2.3 FortiOS 6.2.2 FortiOS 6.2.1 FortiOS 6.2.0 Buffer overflow in execute extender command CVE-2023-29182 FortiOS-7.0.3 FortiOS-7.0.2 FortiOS-7.0.1 FortiOS-7.0.0 FortiOS-6.4.16 FortiOS-6.4.15 FortiOS-6.4.14 FortiOS-6.4.13 FortiOS-6.4.12 FortiOS-6.4.11 FortiOS-6.4.10 FortiOS-6.4.9 FortiOS-6.4.8 FortiOS-6.4.7 FortiOS-6.4.6 FortiOS-6.4.5 FortiOS-6.4.4 FortiOS-6.4.3 FortiOS-6.4.2 FortiOS-6.4.1 FortiOS-6.4.0 FortiOS-6.2.17 FortiOS-6.2.16 FortiOS-6.2.15 FortiOS-6.2.14 FortiOS-6.2.13 FortiOS-6.2.12 FortiOS-6.2.11 FortiOS-6.2.10 FortiOS-6.2.9 FortiOS-6.2.8 FortiOS-6.2.7 FortiOS-6.2.6 FortiOS-6.2.5 FortiOS-6.2.4 FortiOS-6.2.3 FortiOS-6.2.2 FortiOS-6.2.1 FortiOS-6.2.0 5.8 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C https://fortiguard.fortinet.com/psirt/FG-IR-23-149 Buffer overflow in execute extender command Reference> [1] https://code610.blogspot.com/2023/04/fuzzing-fortigate-7.html [1] https://code610.blogspot.com/2023/04/fuzzing-fortigate-7.html