CVE-2021-26111

A missing release of memory after effective lifetime vulnerability in FortiSwitch 6.4.0 to 6.4.6, 6.2.0 to 6.2.6, 6.0.0 to 6.0.6, 3.6.11 and below may allow an attacker on an adjacent network to exhaust available memory by sending specifically crafted LLDP/CDP/EDP packets to the device.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*

History

21 Nov 2024, 05:55

Type Values Removed Values Added
References () https://fortiguard.com/advisory/FG-IR-21-026 - Vendor Advisory () https://fortiguard.com/advisory/FG-IR-21-026 - Vendor Advisory

Information

Published : 2021-06-01 20:15

Updated : 2024-11-21 05:55


NVD link : CVE-2021-26111

Mitre link : CVE-2021-26111

CVE.ORG link : CVE-2021-26111


JSON object : View

Products Affected

fortinet

  • fortiswitch
CWE
CWE-401

Missing Release of Memory after Effective Lifetime