Skip to content
OpenAdvisories
High · 7.5 CVE-2024-36136 EUVD-2024-35894GHSA-jxc5-x72r-w93v

An off-by-one error in WLInfoRailService in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to crash the service, resulting…

Published Aug 14, 2024 · Updated Aug 14, 2024 · Assigned by hackerone

Vendor: ivanti Product: Avalanche Category: Network devices

Description

An off-by-one error in WLInfoRailService in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to crash the service, resulting in a DoS.

Affected products

VendorProductAffectedFixed
Ivanti Avalanche 6.4.4 – < 6.4.4 6.4.4

Advisories 2

References