CVE-2021-26109: Integer Overflow
First published: Wed Dec 08 2021(Updated: )
An integer overflow or wraparound vulnerability in the memory allocator of SSLVPN in FortiOS before 7.0.1 may allow an unauthenticated attacker to corrupt control data on the heap via specifically crafted requests to SSLVPN, resulting in potentially arbitrary code execution.
Credit: psirt@fortinet.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Fortinet FortiOS | >=6.0.0<=6.0.12 | |
| Fortinet FortiOS | >=6.2.0<=6.2.9 | |
| Fortinet FortiOS | >=6.4.0<=6.4.5 | |
| Fortinet FortiOS | =7.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/references
- agent/remedy
- agent/author
- agent/severity
- agent/weakness
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/fortinet
- canonical/fortinet fortios
- version/fortinet fortios/6.0.0
- version/fortinet fortios/6.0.12
- version/fortinet fortios/6.2.0
- version/fortinet fortios/6.2.9
- version/fortinet fortios/6.4.0
- version/fortinet fortios/6.4.5
- version/fortinet fortios/7.0.0