CVE-2024-46670: Out of bounds read in ipsec ike
An Out-of-bounds Read vulnerability [CWE-125] in FortiOS and FortiSASE FortiOS tenant IPsec IKE service may allow an unauthenticated remote attacker to trigger memory consumption leading to Denial of Service via crafted requests.
Other sources
An Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below, version 7.2.9 and below and FortiSASE FortiOS tenant version 24.3.b IPsec IKE service may allow an unauthenticated remote attacker to trigger memory consumption leading to Denial of Service via crafted requests.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46670?
CVE-2024-46670 is classified as a critical severity vulnerability due to its potential to cause Denial of Service.
How do I fix CVE-2024-46670?
To mitigate CVE-2024-46670, upgrade to FortiOS version 7.6.1 or later, 7.4.5 or later, or 7.2.10 or later.
Who is affected by CVE-2024-46670?
CVE-2024-46670 affects Fortinet FortiOS versions prior to 7.6.1, 7.4.5, and 7.2.10.
What type of vulnerability is CVE-2024-46670?
CVE-2024-46670 is categorized as an Out-of-bounds Read vulnerability.
What impact does CVE-2024-46670 have?
Exploitation of CVE-2024-46670 can lead to memory consumption issues resulting in Denial of Service.