CVE-2020-12819: Buffer Overflow
First published: Thu Dec 19 2024(Updated: )
A heap-based buffer overflow vulnerability in the processing of Link Control Protocol messages in FortiGate versions 5.6.12, 6.0.10, 6.2.4 and 6.4.1 and earlier may allow a remote attacker with valid SSL VPN credentials to crash the SSL VPN daemon by sending a large LCP packet, when tunnel mode is enabled. Arbitrary code execution may be theoretically possible, albeit practically very difficult to achieve in this context
Credit: psirt@fortinet.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Fortinet FortiGate | <5.6.12<6.0.10<6.2.4<6.4.1 | |
| Fortinet FortiOS IPS Engine | <5.6.13 | |
| Fortinet FortiOS IPS Engine | >=6.0.0<6.0.11 | |
| Fortinet FortiOS IPS Engine | >=6.2.0<6.2.5 | |
| Fortinet FortiOS IPS Engine | >=6.4.0<6.4.2 |
Remedy
Please upgrade to FortiOS versions 5.6.13 or above. Please upgrade to FortiOS versions 6.0.11 or above. Please upgrade to FortiOS versions 6.2.5 or above. Please upgrade to FortiOS versions 6.4.2 or above. Workaround: Disable tunnel mode.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-12819?
CVE-2020-12819 is rated as high severity due to its potential to allow remote attackers to crash the SSL VPN daemon.
How do I fix CVE-2020-12819?
To fix CVE-2020-12819, upgrade to the latest FortiGate firmware version that is greater than 5.6.13, 6.0.11, 6.2.5, or 6.4.2.
What products are affected by CVE-2020-12819?
CVE-2020-12819 affects FortiGate versions 5.6.12, 6.0.10, 6.2.4, and 6.4.1 and earlier.
Can CVE-2020-12819 be exploited without valid credentials?
No, CVE-2020-12819 requires valid SSL VPN credentials for exploitation.
What type of vulnerability is CVE-2020-12819?
CVE-2020-12819 is classified as a heap-based buffer overflow vulnerability.
- agent/references
- agent/remedy
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/tags
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup-request
- vendor/fortinet
- canonical/fortinet fortigate
- canonical/fortinet fortios ips engine
- version/fortinet fortios ips engine/6.0.0
- version/fortinet fortios ips engine/6.2.0
- version/fortinet fortios ips engine/6.4.0