CVE-2024-46669: Integer Overflow in ipsec ike
An Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS and FortiSASE FortiOS tenant IPsec IKEv1 service may allow an authenticated attacker to crash the IPsec tunnel via crafted requests, resulting in potential denial of service.
Other sources
An Integer Overflow or Wraparound vulnerability [CWE-190] in version 7.4.4 and below, version 7.2.10 and below; FortiSASE version 23.4.b FortiOS tenant IPsec IKE service may allow an authenticated attacker to crash the IPsec tunnel via crafted requests, resulting in potential denial of service.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46669?
CVE-2024-46669 is classified as a denial of service vulnerability due to integer overflow.
How do I fix CVE-2024-46669?
To mitigate CVE-2024-46669, upgrade FortiOS to version 7.4.5 or later.
What systems are affected by CVE-2024-46669?
CVE-2024-46669 affects Fortinet FortiOS versions from 7.2.0 up to 7.4.4.
Can CVE-2024-46669 be exploited remotely?
Yes, CVE-2024-46669 can be exploited by an authenticated attacker remotely.
What are the potential impacts of CVE-2024-46669?
Exploitation of CVE-2024-46669 can lead to an unexpected crash of the IPsec tunnel, resulting in service disruption.