Tracker / CVE-2019-17656
CVE-2019-17656
Medium 5.4
A Stack-based Buffer Overflow vulnerability in the HTTPD daemon of FortiOS 6.0.10 and below, 6.2.2 and below and FortiProxy 1.0.x, 1.1.x, 1.2.9 and below, 2.0.0 and below may allow an authenticated remote attacker to crash the service by sending a malformed PUT request to the server. Fortinet is not aware of any successful exploitation of this vulnerability that would lead to code execution.
Affected products and versions
| fortinet | fortios · … → 6.0.10 |
|---|---|
| fortinet | fortios · 6.2.0 → 6.2.2 |
| fortinet | fortiproxy · 1.0.0 → 1.2.10 |
| fortinet | fortiproxy · 2.0.0 → 2.0.2 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.