VYPR
← All advisories
Medium severity4.9NVD Advisory· Published Jun 13, 2023· Updated Jun 17, 2026

CVE-2023-33305

CVE-2023-33305

Description

A loop with unreachable exit condition ('infinite loop') in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS version 7.0.0 through 7.0.10, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiProxy version 7.2.0 through 7.2.3, FortiProxy version 7.0.0 through 7.0.9, FortiProxy 2.0 all versions, FortiProxy 1.2 all versions, FortiProxy 1.1 all versions, FortiProxy 1.0 all versions, FortiWeb version 7.2.0 through 7.2.1, FortiWeb version 7.0.0 through 7.0.6, FortiWeb 6.4 all versions, FortiWeb 6.3 all versions allows attacker to perform a denial of service via specially crafted HTTP requests.

Affected products

11
  • Fortinet/Fortiproxy3 versions
    cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*range: >=1.0.0,<=1.0.7
    • (no CPE)range: 7.2.0 through 7.2.3, 7.0.0 through 7.0.9, 2.0 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions
    • (no CPE)range: 7.2.0
  • Fortinet/Fortiweb5 versions
    cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*range: >=6.3.0,<=6.3.23
    • cpe:2.3:a:fortinet:fortiweb:7.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiweb:7.2.1:*:*:*:*:*:*:*
    • (no CPE)range: 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4 all versions, 6.3 all versions
    • (no CPE)range: 7.2.0
  • Fortinet/Fortios3 versions
    cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*range: >=5.0.0,<=5.0.14
    • (no CPE)range: 7.2.0 through 7.2.4, 7.0.0 through 7.0.10, 6.4 all versions, 6.2 all versions, 6.0 all versions
    • (no CPE)range: 7.2.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.