CVE-2023-29177

🗓️ 14 Nov 2023 18:07:59Reported by fortinetType

Multiple buffer copy without checking size of input vulnerabilities in FortiADC v7.2.0 & 7.1.2, FortiDDoS-F v6.5.0 & 6.4.1 allow arbitrary code execution via crafted CLI requests

Reporter	Title	Published	Views	Family All 9
CNNVD	Fortinet FortiADC 安全漏洞	14 Nov 202300:00	–	cnnvd
CNVD	Fortinet FortiADC Buffer Overflow Vulnerability	17 Nov 202300:00	–	cnvd
Cvelist	CVE-2023-29177	14 Nov 202318:07	–	cvelist
EUVD	EUVD-2023-32778	3 Oct 202520:07	–	euvd
NVD	CVE-2023-29177	14 Nov 202319:15	–	nvd
OSV	CVE-2023-29177	14 Nov 202319:15	–	osv
Prion	Buffer overflow	14 Nov 202319:15	–	prion
RedhatCVE	CVE-2023-29177	9 Jan 202609:30	–	redhatcve
Vulnrichment	CVE-2023-29177	14 Nov 202318:07	–	vulnrichment

NVD

Node

fortinet fortiadcRange7.1.0–7.1.2

fortinet fortiadcMatch5.2.0-

fortinet fortiadcMatch5.3.0-

fortinet fortiadcMatch5.4.0-

fortinet fortiadcMatch6.0.0-

fortinet fortiadcMatch6.1.0-

fortinet fortiadcMatch6.2.0-

fortinet fortiadcMatch7.0.0-

fortinet fortiadcMatch7.2.0

Node

fortinet fortiddos-fRange6.1.0–6.1.4

fortinet fortiddos-fRange6.4.0–6.4.1

fortinet fortiddos-fMatch6.2.0-

fortinet fortiddos-fMatch6.3.0-

fortinet fortiddos-fMatch6.5.0

[
  {
    "vendor": "Fortinet",
    "product": "FortiDDoS-F",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "6.5.0",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.4.0",
        "lessThanOrEqual": "6.4.1",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.3.0",
        "lessThanOrEqual": "6.3.4",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.2.0",
        "lessThanOrEqual": "6.2.3",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.1.0",
        "lessThanOrEqual": "6.1.4",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fortinet",
    "product": "FortiADC",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "7.2.0",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "7.1.0",
        "lessThanOrEqual": "7.1.2",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "7.0.0",
        "lessThanOrEqual": "7.0.5",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.2.0",
        "lessThanOrEqual": "6.2.6",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.1.0",
        "lessThanOrEqual": "6.1.6",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.0.0",
        "lessThanOrEqual": "6.0.4",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "5.4.0",
        "lessThanOrEqual": "5.4.5",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "5.3.0",
        "lessThanOrEqual": "5.3.7",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "5.2.0",
        "lessThanOrEqual": "5.2.8",
        "status": "affected"
      }
    ]
  }
]

Source	Link
fortiguard	www.fortiguard.com/psirt/FG-IR-23-064

21 Nov 2024 07:56Current

7High risk

Vulners AI Score7

CVSS 3.16.7

EPSS0.00056

SSVC

CWE-120