CVE-2020-29016: [FortiWeb] Stack-Based Buffer Overflow vulnerability using a crafted request
A stack-based buffer overflow [CWE-121] vulnerability in FortiWeb may allow an unauthenticated attacker to overwrite the content of the stack and potentially execute arbitrary code by sending crafted HTTP requests with large request parameter values.
Other sources
A stack-based buffer overflow vulnerability in FortiWeb 6.3.0 through 6.3.5 and version before 6.2.4 may allow an unauthenticated, remote attacker to overwrite the content of the stack and potentially execute arbitrary code by sending a crafted request with a large certname.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-29016?
CVE-2020-29016 has a high severity due to its potential for arbitrary code execution from a stack-based buffer overflow.
How do I fix CVE-2020-29016?
To mitigate CVE-2020-29016, update FortiWeb to a version above 6.2.4 or between 6.3.0 and 6.3.5.
Who is affected by CVE-2020-29016?
CVE-2020-29016 affects FortiWeb versions below 6.2.4 and between 6.3.0 and 6.3.5.
What type of vulnerability is CVE-2020-29016?
CVE-2020-29016 is a stack-based buffer overflow vulnerability categorized under CWE-121.
Can CVE-2020-29016 be exploited remotely?
Yes, CVE-2020-29016 can be exploited by unauthenticated attackers via crafted HTTP requests.