CVE-2021-22129 — Classic Buffer Overflow in Fortinet Fortimail
Severity
8.8HIGHNVD
EPSS
0.5%
top 36.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJul 9
Latest updateMay 24
Description
Multiple instances of incorrect calculation of buffer size in the Webmail and Administrative interface of FortiMail before 6.4.5 may allow an authenticated attacker with regular webmail access to trigger a buffer overflow and to possibly execute unauthorized code or commands via specifically crafted HTTP requests.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9
Affected Packages2 packages
🔴Vulnerability Details
2GHSA▶
GHSA-4466-79c6-7gv2: Multiple instances of incorrect calculation of buffer size in the Webmail and Administrative interface of FortiMail before 6↗2022-05-24
CVEList▶
CVE-2021-22129: Multiple instances of incorrect calculation of buffer size in the Webmail and Administrative interface of FortiMail before 6↗2021-07-09
📋Vendor Advisories
1Fortinet▶
Multiple instances of incorrect calculation of buffer size in the Webmail and Administrative interface of FortiMail befo...↗2021-07-09