Lucene search

CVE-2018-13383

🗓️ 29 May 2019 00:00:00Reported by AttackerKBType

A heap buffer overflow in Fortinet FortiOS and FortiProxy may cause SSL VPN service termination due to improperly handling javascript href data

Reporter	Title	Published	Views	Family All 12
NVD	CVE-2018-13383	29 May 201918:29	–	nvd
CISA KEV Catalog	Fortinet FortiOS and FortiProxy Out-of-bounds Write	10 Jan 202200:00	–	cisa_kev
Tenable Nessus	Fortinet FortiOS (Mac OS X) < 5.6.11, 6.0.x < 6.0.5 SSL VPN Heap Buffer Overflow (FG-IR-18-388) (deprecated)	14 Jun 201900:00	–	nessus
Tenable Nessus	Fortinet FortiOS < 5.6.11, 6.0.x < 6.0.5 SSL VPN Heap Buffer Overflow (FG-IR-18-388)	14 Jun 201900:00	–	nessus
Cvelist	CVE-2018-13383	29 May 201917:20	–	cvelist
CVE	CVE-2018-13383	29 May 201918:29	–	cve
Fortinet	FortiProxy SSL VPN buffer overflow when parsing javascript href content	3 Feb 202100:00	–	fortinet
Fortinet	Protect	26 Nov 201900:00	–	fortinet
Prion	Heap overflow	29 May 201918:29	–	prion
Vulnrichment	CVE-2018-13383	29 May 201917:20	–	vulnrichment

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
securityfocus	www.securityfocus.com/bid/108539
fortiguard	www.fortiguard.com/advisory/FG-IR-18-388
fortiguard	www.fortiguard.com/advisory/FG-IR-20-229
devco	www.devco.re/blog/2019/08/09/attacking-ssl-vpn-part-2-breaking-the-Fortigate-ssl-vpn
i	www.i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

29 May 2019 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS24.3

CVSS34.3 - 6.5

EPSS0.008