Fortinet FortiOS SSL VPN Buffer Overflow (CVE-2018-13381)

A buffer overflow vulnerability exists in Fortinet FortiOS. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...

Fortinet FortiOS <= 5.4, 5.6.x < 5.6.8, 6.0.x < 6.0.5 SSL VPN Buffer Overflow (FG-IR-18-387)

The remote host is running a version of FortiOS prior or equal to 5.4, 5.6.x prior to 5.6.8 or 6.0.x prior to 6.0.5. It is, therefore, affected by a buffer overflow condition in the SSL-VPN web portal, due to a failure to properly parse message payloads. An unauthenticated attacker can exploit...

CVE-2018-13381

A buffer overflow vulnerability in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.7, 5.4 and earlier versions and FortiProxy 2.0.0, 1.2.8 and earlier versions under SSL VPN web portal allows a non-authenticated attacker to perform a Denial-of-service attack via special craft message...

CVE-2018-13381

Fortinet CVE-2018-13381 affects FortiOS up to 6.0.4, 5.6.x up to 5.6.7, 5.4 and earlier, and FortiProxy SSL VPN 2.0.0/1.2.8 and earlier. A buffer overflow in the SSL VPN web portal (via a specially crafted message payload) allows an unauthenticated remote attacker to cause a Denial-of-Service by ...