Nixpkgs security tracker
Untriaged
Permalink
CVE-2025-24477
4.0 MEDIUM
- CVSS version: 3.1
- Attack vector (AV): LOCAL
- Attack complexity (AC): LOW
- Privileges required (PR): HIGH
- User interaction (UI): NONE
- Scope (S): UNCHANGED
- Confidentiality impact (C): LOW
- Integrity impact (I): LOW
- Availability impact (A): LOW
A heap-based buffer overflow in Fortinet FortiOS versions 7.6.0 through …
A heap-based buffer overflow in Fortinet FortiOS versions 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2.4 through 7.2.11 allows an attacker to escalate its privileges via a specially crafted CLI command
Affected products
FortiOS
- =<7.4.7
- =<7.6.2
- =<7.2.11
- =<7.2.12
Matching in nixpkgs
pkgs.terraform-providers.fortios
None
pkgs.python312Packages.fortiosapi
Python module to work with Fortigate/Fortios devices
-
nixos-unstable 1.0.5
pkgs.python313Packages.fortiosapi
Python module to work with Fortigate/Fortios devices
pkgs.python314Packages.fortiosapi
Python module to work with Fortigate/Fortios devices
Package maintainers
-
@fabaff Fabian Affolter <mail@fabian-affolter.ch>