VYPR
← All advisories
Medium severity4.4NVD Advisory· Published Nov 13, 2024· Updated Jun 17, 2026

CVE-2024-38654

CVE-2024-38654

Description

Improper bounds checking in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker with admin privileges to cause a denial of service.

Affected products

8
  • Ivanti/Secure Access Client for Linux7 versions
    cpe:2.3:a:ivanti:secure_access_client:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:ivanti:secure_access_client:*:*:*:*:*:*:*:*range: <22.7
    • cpe:2.3:a:ivanti:secure_access_client:22.7:-:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:secure_access_client:22.7:r1.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:secure_access_client:22.7:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:secure_access_client:22.7:r2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:secure_access_client:22.7:r3:*:*:*:*:*:*
    • (no CPE)range: 22.7R3
  • Ivanti/Secure Access Windows clientllm-fuzzy
    Range: <22.7R3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.