Building an Exploit for FortiGate Vulnerability CVE-2023-27997
bishopfox.com | vulnerability | CVE-2023-27997 | #exploit-development | #heap-overflow | #fortinet | #ssl-vpn | #cve-2023-27997 | #proof-of-concept
Summary
Bishop Fox walks through building a proof-of-concept exploit for CVE-2023-27997, a pre-auth heap buffer overflow in Fortinet's SSL VPN, covering the flawed length check and jemalloc heap grooming.
- Published
- Collected
Skip to content