CVE-2023-29180: Null Pointer Dereference
A null pointer dereference vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 through 7.0.11, FortiOS 6.4.0 through 6.4.12, FortiOS 6.2.0 through 6.2.14, FortiOS 6.0.0 through 6.0.16, FortiProxy 7.2.0 through 7.2.3, FortiProxy 7.0.0 through 7.0.10, FortiProxy 2.0.0 through 2.0.12, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows attacker to denial of service via specially crafted HTTP requests.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Fortinet FortiOSto a version that resolves this vulnerability.Fixed in 6.0.17 - Upgrade
Upgrade
Fortinet FortiOSto a version that resolves this vulnerability.Fixed in 6.2.15 - Upgrade
Upgrade
Fortinet FortiOSto a version that resolves this vulnerability.Fixed in 6.4.13 - Upgrade
Upgrade
Fortinet FortiOSto a version that resolves this vulnerability.Fixed in 7.0.12 - Upgrade
Upgrade
Fortinet FortiOSto a version that resolves this vulnerability.Fixed in 7.2.5 - Upgrade
Upgrade
Fortinet FortiOSto a version that resolves this vulnerability.Fixed in 7.4.0 - Upgrade
Upgrade
Fortinet FortiProxyto a version that resolves this vulnerability.Fixed in 2.0.13 - Upgrade
Upgrade
Fortinet FortiProxyto a version that resolves this vulnerability.Fixed in 7.0.11 - Upgrade
Upgrade
Fortinet FortiProxyto a version that resolves this vulnerability.Fixed in 7.2.4
Event History
Frequently Asked Questions
What is the severity of CVE-2023-29180?
The severity of CVE-2023-29180 is considered to be high, as it involves a null pointer dereference that can lead to potential denial of service.
How do I fix CVE-2023-29180?
To fix CVE-2023-29180, you should update Fortinet FortiOS or FortiProxy to the latest versions that have addressed this vulnerability.
Which versions are affected by CVE-2023-29180?
CVE-2023-29180 affects Fortinet FortiOS versions 7.2.0 through 7.2.4 and 6.0.0 through 6.4.12, along with FortiProxy versions 7.0.0 through 7.2.3 and earlier.
What consequences can result from CVE-2023-29180?
CVE-2023-29180 can lead to a denial of service condition, causing affected systems to become unresponsive.
Is there a workaround for CVE-2023-29180 if I cannot update immediately?
Currently, there are no documented workarounds for CVE-2023-29180, and it is strongly recommended to apply the appropriate security updates as soon as possible.