CVE-2024-38654

Name of the Vulnerable Software and Affected Versions Ivanti Secure Access Client versions prior to 22.7R3

Description The issue is related to improper bounds checking, which can be exploited by a local authenticated attacker with admin privileges to cause a denial of service. This is due to a buffer copy without checking the size of the input data.

Recommendations For versions prior to 22.7R3, update to version 22.7R3 or later to resolve the issue. As a temporary workaround, consider restricting admin privileges to minimize the risk of exploitation.