Fortinet black logo

Resolved issues

Resolved issues

The following issues have been resolved in the FortiDDoS-F 6.4.2 release. For inquiries about particular bugs, please contact Fortinet Customer Service & Support.

Bug ID

Description

0863576

Dashboard > Top Attacks page did not populate for 8-hour period.

0866025

Some systems experienced rapid growth in the MySQL error log, leading to the logdisk becoming full and halting all logging processes. This issue commonly occurred during or right after an upgrade. While there is a workaround available for users on older releases, we strongly recommend upgrading to the latest release to prevent this problem.

0866075

Drops happening at very infrequent intervals showed up in logs but sometimes did not show up on graphs.

0871632/ 0871735

Importing a local certificate with a key file password failed with no indication.

0879823

Deleting an IP address from IPv4 Blocklist did not delete the address.

0883700

Various 8-hour displays were not working at all or could not provide details.

0887985

SSL/TLS Incomplete Request feature was reading the incorrect part of the packet header, creating false-positive drops.

0889213

No attack log was generated for Concurrent Connections per Source.

0894792 When a parameter had no traffic for several days and then experienced a sudden surge in traffic (such as when a primary link failed and all traffic shifted to the secondary link), the system could drop this traffic even with high thresholds and while in Detection Mode.
Common Vulnerabilities and Exposures

For more information, visit https://www.fortiguard.com/psirt.

Bug ID

Description

0772170

FortiDDoS F-Series Release 6.4.2 is no longer vulnerable to CVE-2021-42757

0772198

FortiDDoS F-Series Release 6.4.2 is no longer vulnerable to CVE-2021-36173

0790805

FortiDDoS F-Series Release 6.4.2 is no longer vulnerable to CVE-2022-27486

0874036

FortiDDoS F-Series Release 6.4.2 is no longer vulnerable to CVE-2023-25603

0896035

FortiDDoS F-Series Release 6.4.2 is no longer vulnerable to CVE-2022-27486

0896038

FortiDDoS F-Series Release 6.4.2 is no longer vulnerable to CVE-2023-29177

0896962

FortiDDoS F-Series Release 6.4.2 is no longer vulnerable to CVE-2023-29177

0898898

FortiDDoS F-Series Release 6.4.2 is no longer vulnerable to CVE-2023-29177

Resolved issues

The following issues have been resolved in the FortiDDoS-F 6.4.2 release. For inquiries about particular bugs, please contact Fortinet Customer Service & Support.

Bug ID

Description

0863576

Dashboard > Top Attacks page did not populate for 8-hour period.

0866025

Some systems experienced rapid growth in the MySQL error log, leading to the logdisk becoming full and halting all logging processes. This issue commonly occurred during or right after an upgrade. While there is a workaround available for users on older releases, we strongly recommend upgrading to the latest release to prevent this problem.

0866075

Drops happening at very infrequent intervals showed up in logs but sometimes did not show up on graphs.

0871632/ 0871735

Importing a local certificate with a key file password failed with no indication.

0879823

Deleting an IP address from IPv4 Blocklist did not delete the address.

0883700

Various 8-hour displays were not working at all or could not provide details.

0887985

SSL/TLS Incomplete Request feature was reading the incorrect part of the packet header, creating false-positive drops.

0889213

No attack log was generated for Concurrent Connections per Source.

0894792 When a parameter had no traffic for several days and then experienced a sudden surge in traffic (such as when a primary link failed and all traffic shifted to the secondary link), the system could drop this traffic even with high thresholds and while in Detection Mode.
Common Vulnerabilities and Exposures

For more information, visit https://www.fortiguard.com/psirt.

Bug ID

Description

0772170

FortiDDoS F-Series Release 6.4.2 is no longer vulnerable to CVE-2021-42757

0772198

FortiDDoS F-Series Release 6.4.2 is no longer vulnerable to CVE-2021-36173

0790805

FortiDDoS F-Series Release 6.4.2 is no longer vulnerable to CVE-2022-27486

0874036

FortiDDoS F-Series Release 6.4.2 is no longer vulnerable to CVE-2023-25603

0896035

FortiDDoS F-Series Release 6.4.2 is no longer vulnerable to CVE-2022-27486

0896038

FortiDDoS F-Series Release 6.4.2 is no longer vulnerable to CVE-2023-29177

0896962

FortiDDoS F-Series Release 6.4.2 is no longer vulnerable to CVE-2023-29177

0898898

FortiDDoS F-Series Release 6.4.2 is no longer vulnerable to CVE-2023-29177