Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-38036 EUVD-2023-41863GHSA-rmcg-3298-c99g

A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to create a buffer over…

Published Jul 12, 2025 · Updated Nov 4, 2026 · Assigned by hackerone

Description

A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to create a buffer overflow that could result in service disruption or arbitrary code execution.

Affected products

VendorProductAffectedFixed
Ivanti Avalanche 6.4.0 – < 6.4.1 6.4.1

Advisories 1

References