CVE-2021-42755

Published: Jul 18, 2022Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

An integer overflow / wraparound vulnerability [CWE-190] in FortiSwitch 7.0.2 and below, 6.4.9 and below, 6.2.x, 6.0.x; FortiRecorder 6.4.2 and below, 6.0.10 and below; FortiOS 7.0.2 and below, 6.4.8 and below, 6.2.10 and below, 6.0.x; FortiProxy 7.0.0, 2.0.6 and below, 1.2.x, 1.1.x, 1.0.x; FortiVoiceEnterprise 6.4.3 and below, 6.0.10 and below dhcpd daemon may allow an unauthenticated and network adjacent attacker to crash the dhcpd deamon, resulting in potential denial of service.

Affected (130)

Products: Fortinet: Fortios, Fortiproxy, Fortirecorder Firmware, Fortiswitch, Fortivoice

Fortinet

5 products

Fortios

Fortiproxy

Fortirecorder Firmware

Fortiswitch

Fortivoice

Configuration A

130 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortios	Version 5.4.0
Fortinet Fortios	Version 5.4.10
Fortinet Fortios	Version 5.4.11
Fortinet Fortios	Version 5.4.12
Fortinet Fortios	Version 5.4.13
Fortinet Fortios	Version 5.4.1
Fortinet Fortios	Version 5.4.2
Fortinet Fortios	Version 5.4.3
Fortinet Fortios	Version 5.4.4
Fortinet Fortios	Version 5.4.5
Fortinet Fortios	Version 5.4.6
Fortinet Fortios	Version 5.4.7
Fortinet Fortios	Version 5.4.8
Fortinet Fortios	Version 5.4.9
Fortinet Fortios	Version 5.6.0
Fortinet Fortios	Version 5.6.10
Fortinet Fortios	Version 5.6.11
Fortinet Fortios	Version 5.6.12
Fortinet Fortios	Version 5.6.13
Fortinet Fortios	Version 5.6.14
Fortinet Fortios	Version 5.6.1
Fortinet Fortios	Version 5.6.2
Fortinet Fortios	Version 5.6.3
Fortinet Fortios	Version 5.6.4
Fortinet Fortios	Version 5.6.5
Fortinet Fortios	Version 5.6.6
Fortinet Fortios	Version 5.6.7
Fortinet Fortios	Version 5.6.8
Fortinet Fortios	Version 5.6.9
Fortinet Fortios	Version 6.0.0
Fortinet Fortios	Version 6.0.10
Fortinet Fortios	Version 6.0.11
Fortinet Fortios	Version 6.0.12
Fortinet Fortios	Version 6.0.13
Fortinet Fortios	Version 6.0.14
Fortinet Fortios	Version 6.0.1
Fortinet Fortios	Version 6.0.2
Fortinet Fortios	Version 6.0.3
Fortinet Fortios	Version 6.0.4
Fortinet Fortios	Version 6.0.5
Fortinet Fortios	Version 6.0.6
Fortinet Fortios	Version 6.0.7
Fortinet Fortios	Version 6.0.8
Fortinet Fortios	Version 6.0.9
Fortinet Fortios	Version 6.2.0
Fortinet Fortios	Version 6.2.10
Fortinet Fortios	Version 6.2.1
Fortinet Fortios	Version 6.2.2
Fortinet Fortios	Version 6.2.3
Fortinet Fortios	Version 6.2.4
Fortinet Fortios	Version 6.2.5
Fortinet Fortios	Version 6.2.6
Fortinet Fortios	Version 6.2.7
Fortinet Fortios	Version 6.2.8
Fortinet Fortios	Version 6.2.9
Fortinet Fortios	Version 6.4.0
Fortinet Fortios	Version 6.4.1
Fortinet Fortios	Version 6.4.2
Fortinet Fortios	Version 6.4.3
Fortinet Fortios	Version 6.4.4
Fortinet Fortios	Version 6.4.5
Fortinet Fortios	Version 6.4.6
Fortinet Fortios	Version 6.4.7
Fortinet Fortios	Version 7.0.0
Fortinet Fortios	Version 7.0.1
Fortinet Fortios	Version 7.0.2
Fortinet Fortiproxy	From 1.0.0 to 1.0.7
Fortinet Fortiproxy	From 1.1.0 to 1.1.6
Fortinet Fortiproxy	From 1.2.0 to 1.2.13
Fortinet Fortiproxy	From 2.0.0 to 2.0.6
Fortinet Fortiproxy	Version 7.0.0
Fortinet Fortirecorder Firmware	Version 6.0.0
Fortinet Fortirecorder Firmware	Version 6.0.10
Fortinet Fortirecorder Firmware	Version 6.0.1
Fortinet Fortirecorder Firmware	Version 6.0.2
Fortinet Fortirecorder Firmware	Version 6.0.3
Fortinet Fortirecorder Firmware	Version 6.0.4
Fortinet Fortirecorder Firmware	Version 6.0.5
Fortinet Fortirecorder Firmware	Version 6.0.6
Fortinet Fortirecorder Firmware	Version 6.0.7
Fortinet Fortirecorder Firmware	Version 6.0.8
Fortinet Fortirecorder Firmware	Version 6.0.9
Fortinet Fortirecorder Firmware	Version 6.4.0
Fortinet Fortirecorder Firmware	Version 6.4.1
Fortinet Fortirecorder Firmware	Version 6.4.2
Fortinet Fortiswitch	From 6.0.0 to 6.0.7
Fortinet Fortiswitch	From 6.2.0 to 6.2.7
Fortinet Fortiswitch	From 6.4.0 to 6.4.9
Fortinet Fortiswitch	From 7.0.0 to 7.0.2
Fortinet Fortivoice	Version 5.3.0
Fortinet Fortivoice	Version 5.3.10
Fortinet Fortivoice	Version 5.3.11
Fortinet Fortivoice	Version 5.3.12
Fortinet Fortivoice	Version 5.3.13
Fortinet Fortivoice	Version 5.3.14
Fortinet Fortivoice	Version 5.3.15
Fortinet Fortivoice	Version 5.3.16
Fortinet Fortivoice	Version 5.3.17
Fortinet Fortivoice	Version 5.3.18
Fortinet Fortivoice	Version 5.3.19
Fortinet Fortivoice	Version 5.3.1
Fortinet Fortivoice	Version 5.3.20
Fortinet Fortivoice	Version 5.3.21
Fortinet Fortivoice	Version 5.3.22
Fortinet Fortivoice	Version 5.3.23
Fortinet Fortivoice	Version 5.3.24
Fortinet Fortivoice	Version 5.3.25
Fortinet Fortivoice	Version 5.3.26
Fortinet Fortivoice	Version 5.3.2
Fortinet Fortivoice	Version 5.3.3
Fortinet Fortivoice	Version 5.3.4
Fortinet Fortivoice	Version 5.3.5
Fortinet Fortivoice	Version 5.3.6
Fortinet Fortivoice	Version 5.3.7
Fortinet Fortivoice	Version 5.3.8
Fortinet Fortivoice	Version 6.0.0
Fortinet Fortivoice	Version 6.0.10
Fortinet Fortivoice	Version 6.0.1
Fortinet Fortivoice	Version 6.0.2
Fortinet Fortivoice	Version 6.0.3
Fortinet Fortivoice	Version 6.0.4
Fortinet Fortivoice	Version 6.0.5
Fortinet Fortivoice	Version 6.0.6
Fortinet Fortivoice	Version 6.0.7
Fortinet Fortivoice	Version 6.0.8
Fortinet Fortivoice	Version 6.0.9
Fortinet Fortivoice	Version 6.4.0
Fortinet Fortivoice	Version 6.4.1
Fortinet Fortivoice	Version 6.4.2
Fortinet Fortivoice	Version 6.4.3

Related CWEs

CWE-190

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (2)

https://fortiguard.com/psirt/FG-IR-21-155

Source: psirt@fortinet.com

PatchVendor Advisory

https://fortiguard.com/psirt/FG-IR-21-155

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.