CVE-2023-29180: Null Pointer Dereference
A null pointer dereference in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.14, 6.0.0 through 6.0.16, FortiProxy 7.2.0 through 7.2.3, 7.0.0 through 7.0.10, 2.0.0 through 2.0.12, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7 allows attacker to denial of service via specially crafted HTTP requests.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-29180?
The severity of CVE-2023-29180 is considered to be high, as it involves a null pointer dereference that can lead to potential denial of service.
How do I fix CVE-2023-29180?
To fix CVE-2023-29180, you should update Fortinet FortiOS or FortiProxy to the latest versions that have addressed this vulnerability.
Which versions are affected by CVE-2023-29180?
CVE-2023-29180 affects Fortinet FortiOS versions 7.2.0 through 7.2.4 and 6.0.0 through 6.4.12, along with FortiProxy versions 7.0.0 through 7.2.3 and earlier.
What consequences can result from CVE-2023-29180?
CVE-2023-29180 can lead to a denial of service condition, causing affected systems to become unresponsive.
Is there a workaround for CVE-2023-29180 if I cannot update immediately?
Currently, there are no documented workarounds for CVE-2023-29180, and it is strongly recommended to apply the appropriate security updates as soon as possible.