Lucene search

K
fortinetFortiGuard LabsFG-IR-21-049
HistoryDec 07, 2021 - 12:00 a.m.

Protect

2021-12-0700:00:00
FortiGuard Labs
www.fortiguard.com
10
fortios
sslvpn
integer overflow
vulnerability
memory allocator
cwe-190
unauthenticated attacker
control data
arbitrary code execution
software

EPSS

0.003

Percentile

69.4%

An integer overflow or wraparound vulnerability [CWE-190] in FortiOS SSLVPN memory allocator may allow an unauthenticated attacker to corrupt control data on the heap via specifically crafted requests to SSLVPN, resulting in potentially arbitrary code execution.

EPSS

0.003

Percentile

69.4%

Related for FG-IR-21-049