FG-IR-23-184: Webproxy process denial of service
A use after free vulnerability [CWE-416] in FortiOS & FortiProxy may allow an unauthenticated remote attacker to crash the Web Proxy process via multiple crafted packets reaching proxy policies or firewall policies with proxy mode alongside SSL deep packet inspection.
Affected Software
Event History
Frequently Asked Questions
What is the severity of FG-IR-23-184?
The FG-IR-23-184 vulnerability is classified as a critical issue that can lead to the crashing of the Web Proxy process.
How do I fix FG-IR-23-184?
To mitigate FG-IR-23-184, upgrade to the latest version of FortiOS or FortiProxy provided by Fortinet.
Can FG-IR-23-184 be exploited remotely?
Yes, FG-IR-23-184 can be exploited by unauthenticated remote attackers through crafted packets.
What products are affected by FG-IR-23-184?
FG-IR-23-184 affects Fortinet FortiOS and FortiProxy that utilize proxy mode with SSL deep packet inspection.
What impact does FG-IR-23-184 have on my systems?
FG-IR-23-184 can lead to service disruption by crashing the Web Proxy process on affected systems.