Building an Exploit for FortiGate Vulnerability CVE-2023-27997

CVE

CVE-2023-27997

Published

2023-10-27 00:00

Collected

2026-07-08 00:18

---
id: 3942
title: "Building an Exploit for FortiGate Vulnerability CVE-2023-27997"
cve: CVE-2023-27997
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/building-exploit-fortigate-vulnerability-cve-2023-27997"
published_at: "2023-10-27T00:00:00Z"
tags: ["exploit-development", "heap-overflow", "fortinet", "ssl-vpn", "cve-2023-27997", "proof-of-concept"]
phying_url: "https://phying.com/item/3942"
lang: en
---

# Building an Exploit for FortiGate Vulnerability CVE-2023-27997

## Summary

Bishop Fox walks through building a proof-of-concept exploit for CVE-2023-27997, a pre-auth heap buffer overflow in Fortinet's SSL VPN, covering the flawed length check and jemalloc heap grooming.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2023-27997
- **Published:** 2023-10-27T00:00:00Z
- **Original:** https://bishopfox.com/blog/building-exploit-fortigate-vulnerability-cve-2023-27997
- **Phying News:** https://phying.com/item/3942