An Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3.6.11, 6.0.6 and 6.2.2, FortiAnalyzer below 6.2.3, FortiManager below 6.2.3 and FortiAP-S/W2 below 6.2.2 may allow an attacker to cause admin webUI denial of service (DoS) via handling special crafted HTTP requests/responses in pieces slowly, as demonstrated by Slow HTTP DoS Attacks.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server
    could cause a heap overflow (CVE-2021-26691)

  - An Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3.6.11, 6.0.6 and 6.2.2,
    FortiAnalyzer below 6.2.3, FortiManager below 6.2.3 and FortiAP-S/W2 below 6.2.2 may allow an attacker to
    cause admin webUI denial of service (DoS) via handling special crafted HTTP requests/responses in pieces
    slowly, as demonstrated by Slow HTTP DoS Attacks. (CVE-2019-17657)

  - Apache HTTP Server versions 2.4.0 to 2.4.46 Unprivileged local users can stop httpd on Windows
    (CVE-2020-13938)

  - Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer
    dereference) with specially crafted requests using both Content-Length and Transfer-Encoding headers,
    leading to a Denial of Service (CVE-2020-13950)

  - Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in
    mod_auth_digest. There is no report of this overflow being exploitable, nor the Apache HTTP Server team
    could create one, though some particular compiler and/or compilation option might make it possible, with
    limited consequences anyway due to the size (a single byte) and the value (zero byte) of the overflow
    (CVE-2020-35452)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the FG-IR-19-013 advisory.

  - An Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3.6.11, 6.0.6 and 6.2.2,     FortiAnalyzer below 6.2.3, FortiManager below 6.2.3 and FortiAP-S/W2 below 6.2.2 may allow an attacker to     cause admin webUI denial of service (DoS) via handling special crafted HTTP requests/responses in pieces     slowly, as demonstrated by Slow HTTP DoS Attacks. (CVE-2019-17657)

  - The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon outage)     via partial HTTP requests, as demonstrated by Slowloris, related to the lack of the mod_reqtimeout module     in versions before 2.2.15. (CVE-2007-6750)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
423655	Alpine: multiple apache2 packages: security update to 2.4.48-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
423655	Alpine: multiple apache2 packages: security update to 2.4.48-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
209849	Fortinet Fortigate Slow HTTP DoS Attacks Mitigation (FG-IR-19-013)	Nessus	Firewalls	high

Detections

Analytics

CVE-2019-17657

high

Tenable Plugins

critical

critical

high