CVE-2023-33306

A null pointer dereference in Fortinet FortiOS before 7.2.5, before 7.0.11 and before 6.4.13, FortiProxy before 7.2.4 and before 7.0.10 allows attacker to denial of sslvpn service via specifically crafted request in bookmark parameter...

CVE-2023-33306

Concretely affects Fortinet FortiOS and FortiProxy: a NULL POINTER DEREFERENCE (CWE-476) in the SSL-VPN/related components allows remote, authenticated attackers to crash the service via crafted requests. Affected versions include FortiOS pre-7.2.5, pre-7.0.11, and pre-6.4.13, and FortiProxy pre-...