description: A numeric truncation error in Fortinet FortiProxy version 7.2.0 through 7.2.4, FortiProxy version 7.0.0 through 7.0.10, FortiProxy 2.0 all versions, FortiProxy 1.2 all versions, FortiProxy 1.1, all  versions, FortiProxy 1.0 all versions, FortiOS version 7.4.0, FortiOS version 7.2.0 through 7.2.5, FortiOS version 7.0.0 through 7.0.12, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions allows attacker to denial of service via specifically crafted HTTP requests.
problem types: Denial of service
affected:
{
vendor: Fortinet
product: FortiProxy
defaultStatus: unaffected
versions:
versionType: semver, version: 7.2.0, lessThanOrEqual: 7.2.4, status: affected
versionType: semver, version: 7.0.0, lessThanOrEqual: 7.0.10, status: affected
versionType: semver, version: 2.0.0, lessThanOrEqual: 2.0.13, status: affected
versionType: semver, version: 1.2.0, lessThanOrEqual: 1.2.13, status: affected
versionType: semver, version: 1.1.0, lessThanOrEqual: 1.1.6, status: affected
versionType: semver, version: 1.0.0, lessThanOrEqual: 1.0.7, status: affected
}
{
vendor: Fortinet
product: FortiOS
defaultStatus: unaffected
versions:
version: 7.4.0, status: affected
versionType: semver, version: 7.2.0, lessThanOrEqual: 7.2.5, status: affected
versionType: semver, version: 7.0.0, lessThanOrEqual: 7.0.12, status: affected
versionType: semver, version: 6.4.0, lessThanOrEqual: 6.4.14, status: affected
versionType: semver, version: 6.2.0, lessThanOrEqual: 6.2.15, status: affected
versionType: semver, version: 6.0.0, lessThanOrEqual: 6.0.17, status: affected
}
metrics:
format: CVSS
cvssV3_1: [
version: 3.1
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.2
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C
]
solutions: Please upgrade to FortiSASE version 23.3.b or above
Please upgrade to FortiProxy version 7.2.5 or above
Please upgrade to FortiProxy version 7.0.11 or above
Please upgrade to FortiOS version 7.4.1 or above
Please upgrade to FortiOS version 7.2.6 or above
Please upgrade to FortiOS version 7.0.13 or above