Unrated severityNVD Advisory· Published Apr 19, 2024· Updated Aug 1, 2024

CVE-2024-24991

Description

A Null Pointer Dereference vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an authenticated remote attacker to perform denial of service attacks.

Affected products

Ivanti/Avalanchellm-fuzzy2 versions
<6.4.3+ 1 more
- (no CPE)range: <6.4.3
- (no CPE)range: 6.4.3

Patches

Vulnerability mechanics

References

forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressedmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000