An Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below, version 7.2.9 and below and FortiSASE FortiOS tenant version 24.3.b IPsec IKE service may allow an unauthenticated remote attacker to trigger memory consumption leading to Denial of Service via crafted requests.
References
| Link | Resource |
|---|---|
| https://fortiguard.fortinet.com/psirt/FG-IR-24-266 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
31 Jan 2025, 16:12
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Fortinet
Fortinet fortios |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| References | () https://fortiguard.fortinet.com/psirt/FG-IR-24-266 - Vendor Advisory | |
| CPE | cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:* |
14 Jan 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-01-14 14:15
Updated : 2025-01-31 16:12
NVD link : CVE-2024-46670
Mitre link : CVE-2024-46670
JSON object : View
Products Affected
fortinet
- fortios
CWE
CWE-125
Out-of-bounds Read