Fortinet Fortigate Heap-based buffer overflow in sslvpnd (FG-IR-22-398)

critical Nessus Plugin ID 168637

Language:

Version 1.10 Oct 29, 2024, 3:05 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202410291505
Version 1.9 Oct 26, 2024, 3:03 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202410261503
Version 1.8 Oct 31, 2023, 3:59 PM Detection (Added configuration check for SSL-VPN) Plugin metadata (Edited solution to suggest workaround) Plugin Feed: 202310311559
Version 1.7 Sep 8, 2023, 10:12 PM CEA reference Plugin Feed: 202309082212
Version 1.6 Feb 24, 2023, 12:09 PM IAVM reference Plugin Feed: 202302241209
Version 1.5 Dec 14, 2022, 11:52 AM CISA reference CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:H/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:H/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") IAVM reference STIG Severity (set to "I") Plugin Feed: 202212141152
Version 1.3 Dec 14, 2022, 5:50 AM Detection Plugin metadata Plugin Feed: 202212140550
Version 1.2 Dec 13, 2022, 9:49 PM Reference Plugin Feed: 202212132149
Version 1.1 Dec 12, 2022, 11:43 PM New Plugin Feed: 202212122343

* Changelogs are generally available for changes made after Nov 1, 2022