topic Re: Fortinet Pre-authentication Heap-based Buffer Overflow Vulnerability (CVE-2023-27997) is covered in Palo Alto NIPS Signature ? in Next-Generation Firewall Discussions

Fortinet Pre-authentication Heap-based Buffer Overflow Vulnerability (CVE-2023-27997) is covered in Palo Alto NIPS Signature ?

Suhairul_Salleh — Wed, 21 Jun 2023 01:59:55 GMT

Hi all,

Can I check with you the following Fortinet Pre-authentication Heap-based Buffer Overflow Vulnerability (CVE-2023-27997) is covered in Palo Alto NIPS Signature ?

If yes, May I know which released signature version and threat id is covered for this vulnerability?

Vulnerability Details:

Title	Fortinet Pre-authentication Heap-based Buffer Overflow Vulnerability
CVE ID	CVE-2023-27997
CVE Summary	Fortinet published an advisory on a pre-authentication heap-based buffer overflow vulnerability (CVE-2023-27997) in FortiOS and FortiProxy SSL-VPN. Successful exploitation of the vulnerability may allow a remote attacker to execute arbitrary code or commands via specially crafted requests. The vulnerability has a CVSS base score of 9.8.
Link(s)	https://www.fortiguard.com/psirt/FG-IR-23-097

Re: Fortinet Pre-authentication Heap-based Buffer Overflow Vulnerability (CVE-2023-27997) is covered in Palo Alto NIPS Signature ?

aleksandar.astardzhiev — Sun, 25 Jun 2023 08:06:33 GMT

Hi @Suhairul_Salleh ,

Unfortunately it seems PAN haven't published official IPS signature to cover this vulnerability, yet.

Re: Fortinet Pre-authentication Heap-based Buffer Overflow Vulnerability (CVE-2023-27997) is covered in Palo Alto NIPS Signature ?

Suhairul_Salleh — Mon, 26 Jun 2023 03:07:08 GMT

Hi @aleksandar.astardzhiev ,

Thanks for the reply.

May I know is it going to be released soon? and when it will be released?

Re: Fortinet Pre-authentication Heap-based Buffer Overflow Vulnerability (CVE-2023-27997) is covered in Palo Alto NIPS Signature ?

PavelK — Tue, 27 Jun 2023 04:39:38 GMT

Hello @Suhairul_Salleh

the signature for CVE-2023-27997 has been released today in the content update: 8725.

Kind Regards

Pavel

Re: Fortinet Pre-authentication Heap-based Buffer Overflow Vulnerability (CVE-2023-27997) is covered in Palo Alto NIPS Signature ?

Suhairul_Salleh — Tue, 27 Jun 2023 05:32:50 GMT

Hi @PavelK

Glad to hear that. Many thanks for the update.

Best Regards,

Suhairul