Fortinet Pre-authentication Heap-based Buffer Overflow Vulnerability (CVE-2023-27997) is covered in Palo Alto NIPS Signature ?

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Fortinet Pre-authentication Heap-based Buffer Overflow Vulnerability (CVE-2023-27997) is covered in Palo Alto NIPS Signature ?

L3 Networker

Hi all,

 

Can I check with you the following Fortinet Pre-authentication Heap-based Buffer Overflow Vulnerability (CVE-2023-27997) is covered in Palo Alto NIPS Signature ?

If yes, May I know which released signature version and threat id is covered for this vulnerability?

 

Vulnerability Details:

Title

Fortinet Pre-authentication Heap-based Buffer Overflow Vulnerability

CVE ID

CVE-2023-27997

CVE Summary

Fortinet published an advisory on a pre-authentication heap-based buffer overflow vulnerability (CVE-2023-27997) in FortiOS and FortiProxy SSL-VPN. Successful exploitation of the vulnerability may allow a remote attacker to execute arbitrary code or commands via specially crafted requests.

 

The vulnerability has a CVSS base score of 9.8.

Link(s)

https://www.fortiguard.com/psirt/FG-IR-23-097

4 REPLIES 4

Hi @Suhairul_Salleh ,

 

Unfortunately it seems PAN haven't published official IPS signature to cover this vulnerability, yet.

Hi @aleksandar.astardzhiev ,

 

Thanks for the reply.

May I know is it going to be released soon? and when it will be released?

Cyber Elite
Cyber Elite

Hello @Suhairul_Salleh

 

the signature for CVE-2023-27997 has been released today in the content update: 8725.

PavelK_0-1687840743187.png

 

Kind Regards

Pavel

 

 

Help the community: Like helpful comments and mark solutions.

Hi @PavelK 

Glad to hear that. Many thanks for the update.

 

Best Regards,

Suhairul

  • 1468 Views
  • 4 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!