FortiOS & FortiProxy - Heap buffer overflow in sslvpn pre-authentication

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS and FortiProxy SSL-VPN may allow a remote attacker to execute arbitrary code or commands via specifically crafted requests. 


CVE ID: CVE-2023-27997 

Severity: Critical 


For solutions check https://www.fortiguard.com/psirt/FG-IR-23-097