CVE-2020-12819

CVSS V2 None CVSS V3 None

Description

A heap-based buffer overflow vulnerability in the processing of Link Control Protocol messages in FortiGate versions 5.6.12, 6.0.10, 6.2.4 and 6.4.1 and earlier may allow a remote attacker with valid SSL VPN credentials to crash the SSL VPN daemon by sending a large LCP packet, when tunnel mode is enabled. Arbitrary code execution may be theoretically possible, albeit practically very difficult to achieve in this context

Overview

CVE ID
CVE-2020-12819

Assigner
fortinet

Vulnerability Status
PUBLISHED

Published Version
2024-12-19T07:40:58.144Z

Last Modified Date
2024-12-19T07:40:58.144Z

Weakness Enumerations

CWE	URL
CWE-122	http://cwe.mitre.org/data/definitions/122.html

References

Reference URL	Reference Tags
https://fortiguard.com/advisory/FG-IR-20-082

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2020-12819
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12819

History

Created	Old Value	New Value	Data Type	Notes
2024-12-20 12:02:27				Added to TrackCVE