CVE-2024-46670: Out-of-bounds Read

An Out-of-bounds Read vulnerability CWE-125 in FortiOS version 7.6.0, version 7.4.4 and below, version 7.2.9 and below and FortiSASE FortiOS tenant version 24.3.b IPsec IKE service may allow an unauthenticated remote attacker to trigger memory consumption leading to Denial of Service via crafted...

PT-2025-1185

Name of the Vulnerable Software and Affected Versions FortiOS versions 7.6.0 through 7.4.4 and earlier FortiOS versions 7.2.9 and earlier FortiSASE FortiOS tenant version 24.3.b Description The issue is related to an out-of-bounds read vulnerability in the IPsec IKE service of FortiOS and FortiSA...

CVE-2024-46669: Integer Overflow or Wraparound

An Integer Overflow or Wraparound vulnerability CWE-190 in version 7.4.4 and below, version 7.2.10 and below; FortiSASE version 23.4.b FortiOS tenant IPsec IKE service may allow an authenticated attacker to crash the IPsec tunnel via crafted requests, resulting in potential denial of service...