CVE-2018-13381

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-06-04 · updated 2026-06-17
Weakness: CWE-119

Description

A buffer overflow vulnerability in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.7, 5.4 and earlier versions and FortiProxy 2.0.0, 1.2.8 and earlier versions under SSL VPN web portal allows a non-authenticated attacker to perform a Denial-of-service attack via special craft message payloads.

Affected products

Fortinet FortiOS (FortiGate): through 5.2.14; from 5.4.0 through 5.4.12; from 5.6.0 through 5.6.10; from 6.0.0 through 6.0.4
Fortinet FortiProxy: through 1.2.8; 2.0.0

References

https://fortiguard.com/advisory/FG-IR-18-387
https://fortiguard.com/advisory/FG-IR-20-232
https://fortiguard.com/advisory/FG-IR-18-387
https://fortiguard.com/advisory/FG-IR-20-232

Get alerted when CVE-2018-13381 or the next vulnerability affects your stack