A null pointer dereference in Fortinet FortiOS before 7.2.5 and before 7.0.11, FortiProxy before 7.2.3 and before 7.0.9 allows attacker to denial of sslvpn service via specifically crafted request in network parameter.
Weakness
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Fortiproxy | Fortinet | 7.0.0 (including) | 7.0.9 (including) |
| Fortiproxy | Fortinet | 7.2.0 (including) | 7.2.3 (including) |
| Fortios | Fortinet | 7.0.0 (including) | 7.0.11 (excluding) |
| Fortios | Fortinet | 7.2.0 (including) | 7.2.5 (excluding) |