CVE-2019-16152

Summary

A Denial of service (DoS) vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to cause FortiClient processes running under root privilege crashes via sending specially crafted IPC client requests to the fctsched process due the nanomsg not been correctly validated.

Affected Software

VendorProductVersion RangeStatus
FortinetFortinet FortiClientLinuxFortiClientLinux 6.2.1 and belowaffected

Weaknesses

  • Escalation of privilege

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References