PT-2023-8293 · Ivanti · Ivanti Avalanche

CVE-2023-46803

·

Publicado

2023-12-18

·

Atualizado

2024-01-11

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Ivanti Avalanche versions (affected versions not specified)
Description The issue is related to insufficient exception handling in the WLAvalancheService of the Ivanti Avalanche mobile device management system. An attacker can exploit this by sending specially crafted data packets to the Mobile Device Server, potentially causing memory corruption and resulting in a Denial of Service (DoS). This could allow a remote attacker to cause the service to become unavailable.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Handling of Exceptional Conditions

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2024-00377
CVE-2023-46803
ZDI-24-067

Produtos afetados

Ivanti Avalanche