Vulnerabilities > CVE-2023-33305 - Infinite Loop vulnerability in Fortinet Fortios and Fortiproxy

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

fortinet

CWE-835

NVD

Published: 2023-06-13

Updated: 2023-11-07

Summary

A loop with unreachable exit condition ('infinite loop') in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS version 7.0.0 through 7.0.10, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiProxy version 7.2.0 through 7.2.3, FortiProxy version 7.0.0 through 7.0.9, FortiProxy 2.0 all versions, FortiProxy 1.2 all versions, FortiProxy 1.1 all versions, FortiProxy 1.0 all versions, FortiWeb version 7.2.0 through 7.2.1, FortiWeb version 7.0.0 through 7.0.6, FortiWeb 6.4 all versions, FortiWeb 6.3 all versions allows attacker to perform a denial of service via specially crafted HTTP requests.

Vulnerable Configurations

Part	Description	Count
Application	Fortinet Fortinet Fortiproxy 1.0.0 Fortinet Fortiproxy 1.0.1 Fortinet Fortiproxy 1.0.2 Fortinet Fortiproxy 1.0.3 Fortinet Fortiproxy 1.0.4 Fortinet Fortiproxy 1.0.5 Fortinet Fortiproxy 1.0.6 Fortinet Fortiproxy 1.0.7 Fortinet Fortiproxy 1.1.0 Fortinet Fortiproxy 1.1.1 Fortinet Fortiproxy 1.1.2 Fortinet Fortiproxy 1.1.3 Fortinet Fortiproxy 1.1.4 Fortinet Fortiproxy 1.1.5 Fortinet Fortiproxy 1.1.6 Fortinet Fortiproxy 1.2.0 Fortinet Fortiproxy 1.2.1 Fortinet Fortiproxy 1.2.2 Fortinet Fortiproxy 1.2.3 Fortinet Fortiproxy 1.2.4 Fortinet Fortiproxy 1.2.5 Fortinet Fortiproxy 1.2.6 Fortinet Fortiproxy 1.2.7 Fortinet Fortiproxy 1.2.8 Fortinet Fortiproxy 1.2.9 Fortinet Fortiproxy 1.2.10 Fortinet Fortiproxy 1.2.11 Fortinet Fortiproxy 1.2.12 Fortinet Fortiproxy 1.2.13 Fortinet Fortiproxy 2.0.0 Fortinet Fortiproxy 2.0.1 Fortinet Fortiproxy 2.0.2 Fortinet Fortiproxy 2.0.3 Fortinet Fortiproxy 2.0.4 Fortinet Fortiproxy 2.0.5 Fortinet Fortiproxy 2.0.6 Fortinet Fortiproxy 2.0.7 Fortinet Fortiproxy 2.0.8 Fortinet Fortiproxy 2.0.9 Fortinet Fortiproxy 2.0.10 Fortinet Fortiproxy 2.0.12 Fortinet Fortiproxy 7.0.3 Fortinet Fortiproxy 7.0.8 Fortinet Fortiproxy 7.2.0 Fortinet Fortiproxy 7.2.1 Fortinet Fortiproxy 7.2.2 Fortinet Fortiweb 6.4.0 Fortinet Fortiweb 6.4.1 Fortinet Fortiweb 6.4.2 Fortinet Fortiweb 6.4.3 Fortinet Fortiweb 7.2.0 Fortinet Fortiweb 7.2.1 Fortinet Fortiweb 7.0.0 Fortinet Fortiweb 7.0.1 Fortinet Fortiweb 7.0.2 Fortinet Fortiweb 7.0.3 Fortinet Fortiweb 7.0.4 Fortinet Fortiweb 6.3.0 Fortinet Fortiweb 6.3.1 Fortinet Fortiweb 6.3.2 Fortinet Fortiweb 6.3.3 Fortinet Fortiweb 6.3.4 Fortinet Fortiweb 6.3.5 Fortinet Fortiweb 6.3.6 Fortinet Fortiweb 6.3.7 Fortinet Fortiweb 6.3.8 Fortinet Fortiweb 6.3.9 Fortinet Fortiweb 6.3.10 Fortinet Fortiweb 6.3.11 Fortinet Fortiweb 6.3.12 Fortinet Fortiweb 6.3.13 Fortinet Fortiweb 6.3.14 Fortinet Fortiweb 6.3.15 Fortinet Fortiweb 6.3.16 Fortinet Fortiweb 6.3.17 Fortinet Fortiweb 6.3.18 Fortinet Fortiweb 6.3.19 Fortinet Fortiweb 6.3.20 Fortinet Fortiweb 6.3.21 Fortinet Fortiweb 6.3.22 Fortinet Fortiweb 6.3.23	81
OS	Fortinet Fortinet Fortios 5.6.0 Fortinet Fortios 5.6.1 Fortinet Fortios 5.6.2 Fortinet Fortios 5.6.3 Fortinet Fortios 5.6.4 Fortinet Fortios 5.6.5 Fortinet Fortios 5.6.6 Fortinet Fortios 5.6.7 Fortinet Fortios 5.6.8 Fortinet Fortios 5.6.9 Fortinet Fortios 5.6.10 Fortinet Fortios 5.6.11 Fortinet Fortios 5.6.12 Fortinet Fortios 5.6.13 Fortinet Fortios 5.6.14 Fortinet Fortios 5.4.0 Fortinet Fortios 5.4.1 Fortinet Fortios 5.4.2 Fortinet Fortios 5.4.3 Fortinet Fortios 5.4.4 Fortinet Fortios 5.4.5 Fortinet Fortios 5.4.6 Fortinet Fortios 5.4.7 Fortinet Fortios 5.4.8 Fortinet Fortios 5.4.9 Fortinet Fortios 5.4.10 Fortinet Fortios 5.4.11 Fortinet Fortios 5.4.12 Fortinet Fortios 5.4.13 Fortinet Fortios 5.2.0 Fortinet Fortios 5.2.1 Fortinet Fortios 5.2.2 Fortinet Fortios 5.2.3 Fortinet Fortios 5.2.4 Fortinet Fortios 5.2.5 Fortinet Fortios 5.2.6 Fortinet Fortios 5.2.7 Fortinet Fortios 5.2.8 Fortinet Fortios 5.2.9 Fortinet Fortios 5.2.10 Fortinet Fortios 5.2.11 Fortinet Fortios 5.2.12 Fortinet Fortios 5.2.13 Fortinet Fortios 5.2.14 Fortinet Fortios 5.2.15 Fortinet Fortios 5.0.0 Fortinet Fortios 5.0.1 Fortinet Fortios 5.0.2 Fortinet Fortios 5.0.3 Fortinet Fortios 5.0.4 Fortinet Fortios 5.0.5 Fortinet Fortios 5.0.6 Fortinet Fortios 5.0.7 Fortinet Fortios 5.0.8 Fortinet Fortios 5.0.9 Fortinet Fortios 5.0.10 Fortinet Fortios 5.0.11 Fortinet Fortios 5.0.12 Fortinet Fortios 5.0.13 Fortinet Fortios 5.0.14 Fortinet Fortios 7.0.0 Fortinet Fortios 7.0.1 Fortinet Fortios 7.0.2 Fortinet Fortios 7.0.3 Fortinet Fortios 7.0.4 Fortinet Fortios 7.0.5 Fortinet Fortios 7.0.6 Fortinet Fortios 7.0.7 Fortinet Fortios 7.0.8 Fortinet Fortios 7.0.9 Fortinet Fortios 7.2.0 Fortinet Fortios 7.2.1 Fortinet Fortios 7.2.2 Fortinet Fortios 7.2.3 Fortinet Fortios 6.2.0 Fortinet Fortios 6.2.1 Fortinet Fortios 6.2.2 Fortinet Fortios 6.2.3 Fortinet Fortios 6.2.4 Fortinet Fortios 6.2.5 Fortinet Fortios 6.2.6 Fortinet Fortios 6.2.7 Fortinet Fortios 6.2.8 Fortinet Fortios 6.2.9 Fortinet Fortios 6.2.10 Fortinet Fortios 6.2.11 Fortinet Fortios 6.2.12 Fortinet Fortios 6.2.13 Fortinet Fortios 6.2.14 Fortinet Fortios 6.0.0 Fortinet Fortios 6.0.1 Fortinet Fortios 6.0.2 Fortinet Fortios 6.0.3 Fortinet Fortios 6.0.4 Fortinet Fortios 6.0.5 Fortinet Fortios 6.0.6 Fortinet Fortios 6.0.7 Fortinet Fortios 6.0.8 Fortinet Fortios 6.0.9 Fortinet Fortios 6.0.10 Fortinet Fortios 6.0.11 Fortinet Fortios 6.0.12 Fortinet Fortios 6.0.13 Fortinet Fortios 6.0.14 Fortinet Fortios 6.0.15 Fortinet Fortios 6.0.16 Fortinet Fortios 6.0.17 Fortinet Fortios 6.4.11	108

Common Weakness Enumeration (CWE)

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

References

https://fortiguard.com/psirt/FG-IR-22-375