Description
An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because the hostname check operates on uninitialized memory. The outcome is that a valid certificate is never accepted (only a malformed certificate may be accepted).
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openfortivpn | 1.12.0-1 | — |
| Debian 13 | openfortivpn | 1.12.0-1 | — |
| Debian 12 | openfortivpn | 1.12.0-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | openfortivpn | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE Package Hub 15 SP1 | openfortivpn | 1.12.0-bp151.3.3.1 | openSUSE-SU-2020:0305-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | openfortivpn | 1.17.1-1.1 | openSUSE-SU-2024:11118-1 |
| openSUSE Leap 15.1 | openfortivpn | 1.12.0-lp151.2.5.1 | openSUSE-SU-2020:0301-1 |
Advisories 3
- openSUSE-SU-2020:0305-1 Security update for openfortivpn SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:0301-1 Security update for openfortivpn SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11118-1 openfortivpn-1.17.1-1.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
References
- https://github.com/adrienverge/openfortivpn/issues/536
- https://github.com/adrienverge/openfortivpn/commit/cd9368c6a1b4ef91d77bb3fdbe2e5bc34aa6f4c4
- openSUSE-SU-2020:0301 vendor-advisory
- openSUSE-SU-2020:0305 vendor-advisory
- FEDORA-2020-42eb8821db vendor-advisory
- FEDORA-2020-c96ab3c813 vendor-advisory
- FEDORA-2020-dcdffcc368 vendor-advisory
- https://github.com/adrienverge/openfortivpn/commit/9eee997d599a89492281fc7ffdd79d88cd61afc3