FortiOS & FortiProxy - Heap buffer overflow in sslvpn pre-authentication

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS and FortiProxy SSL-VPN may allow a remote attacker to execute arbitrary code or commands via specifically crafted requests.

authentication buffer buffer overflow buffer overflow vulnerability code cwe fortios fortiproxy heap buffer overflow may overflow requests ssl sslvpn vpn vulnerability