CVE-2020-12819: Buffer Overflow
A heap-based buffer overflow vulnerability in the processing of Link Control Protocol messages in FortiGate versions 5.6.12, 6.0.10, 6.2.4 and 6.4.1 and earlier may allow a remote attacker with valid SSL VPN credentials to crash the SSL VPN daemon by sending a large LCP packet, when tunnel mode is enabled. Arbitrary code execution may be theoretically possible, albeit practically very difficult to achieve in this context
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2020-12819?
CVE-2020-12819 is rated as high severity due to its potential to allow remote attackers to crash the SSL VPN daemon.
How do I fix CVE-2020-12819?
To fix CVE-2020-12819, upgrade to the latest FortiGate firmware version that is greater than 5.6.13, 6.0.11, 6.2.5, or 6.4.2.
What products are affected by CVE-2020-12819?
CVE-2020-12819 affects FortiGate versions 5.6.12, 6.0.10, 6.2.4, and 6.4.1 and earlier.
Can CVE-2020-12819 be exploited without valid credentials?
No, CVE-2020-12819 requires valid SSL VPN credentials for exploitation.
What type of vulnerability is CVE-2020-12819?
CVE-2020-12819 is classified as a heap-based buffer overflow vulnerability.