Fortinet Pre-authentication Heap-based Buffer Overflow Vulnerability (CVE-2023-27997) is covered in Palo Alto NIPS Signature ?

[Suhairul_Salleh]

Hi all,

Can I check with you the following Fortinet Pre-authentication Heap-based Buffer Overflow Vulnerability (CVE-2023-27997) is covered in Palo Alto NIPS Signature ?

If yes, May I know which released signature version and threat id is covered for this vulnerability?

Vulnerability Details:

Title	Fortinet Pre-authentication Heap-based Buffer Overflow Vulnerability
CVE ID	CVE-2023-27997
CVE Summary	Fortinet published an advisory on a pre-authentication heap-based buffer overflow vulnerability (CVE-2023-27997) in FortiOS and FortiProxy SSL-VPN. Successful exploitation of the vulnerability may allow a remote attacker to execute arbitrary code or commands via specially crafted requests. The vulnerability has a CVSS base score of 9.8.
Link(s)	https://www.fortiguard.com/psirt/FG-IR-23-097

[aleksandar.astardzhiev]

Hi @Suhairul_Salleh ,

Unfortunately it seems PAN haven't published official IPS signature to cover this vulnerability, yet.

[Suhairul_Salleh]

Hi @aleksandar.astardzhiev ,

Thanks for the reply.

May I know is it going to be released soon? and when it will be released?

[PavelK]

Hello @Suhairul_Salleh

the signature for CVE-2023-27997 has been released today in the content update: 8725.

Kind Regards

Pavel

[Suhairul_Salleh]

Hi @PavelK 

Glad to hear that. Many thanks for the update.

Best Regards,

Suhairul