Unrated severityNVD Advisory· Published Apr 19, 2024· Updated Aug 1, 2024

CVE-2024-23531

Description

An Integer Overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows an unauthenticated remote attacker to perform denial of service attacks. In certain rare conditions this could also lead to reading content from memory.

Affected products

Ivanti/Avalanchellm-fuzzy2 versions
<6.4.3+ 1 more
- (no CPE)range: <6.4.3
- (no CPE)range: 6.4.3

Patches

Vulnerability mechanics

References

forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressedmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000