FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
This article explains why the CVE-2023-38283 does not affect FortiGate.
Scope
FortiGate.
Solution
This CVE describes a problem where the system could reset a session incorrectly due to mishandling of BGP update data, including the length of path attributes, set by a remote actor that might be far away.
This is reported in the CVE-2023-38283 and affects OpenBGPD version 8.1 but FortiGate does not know to use this free implementation of the BGP, so all Fortios versions are safe from this CVE.
