An integer overflow / wraparound vulnerability [CWE-190] in FortiSwitch 7.0.2 and below, 6.4.9 and below, 6.2.x, 6.0.x; FortiRecorder 6.4.2 and below, 6.0.10 and below; FortiOS 7.0.2 and below, 6.4.8 and below, 6.2.10 and below, 6.0.x; FortiProxy 7.0.0, 2.0.6 and below, 1.2.x, 1.1.x, 1.0.x; FortiVoiceEnterprise 6.4.3 and below, 6.0.10 and below dhcpd daemon may allow an unauthenticated and network adjacent attacker to crash the dhcpd deamon, resulting in potential denial of service.
References
Link | Resource |
---|---|
https://fortiguard.com/psirt/FG-IR-21-155 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2022-07-18 10:15
Updated : 2022-07-25 11:33
NVD link : CVE-2021-42755
Mitre link : CVE-2021-42755
JSON object : View
CWE
CWE-190
Integer Overflow or Wraparound
Products Affected
fortinet
- fortios
- fortiproxy
- fortivoice
- fortirecorder_firmware
- fortiswitch