A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack. In certain conditions this may lead to execution of arbitrary code
Metrics
Affected Vendors & Products
History
Thu, 03 Oct 2024 22:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Weaknesses | CWE-703 | |
CPEs | cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*:* cpe:2.3:a:ivanti:policy_secure:*:*:*:*:*:*:*:* |
|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: hackerone
Published: 2024-04-04T22:16:29.330Z
Updated: 2024-10-03T21:43:40.315Z
Reserved: 2024-01-03T01:04:06.539Z
Link: CVE-2024-21894
Vulnrichment
Updated: 2024-08-01T22:35:33.424Z
NVD
Status : Modified
Published: 2024-04-04T23:15:15.640
Modified: 2024-11-21T08:55:12.850
Link: CVE-2024-21894
Redhat
No data.