A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack or in certain conditions read contents from memory.
History

Thu, 03 Oct 2024 22:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-703
CPEs cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*:*
cpe:2.3:a:ivanti:policy_secure:*:*:*:*:*:*:*:*
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: hackerone

Published: 2024-04-04T19:45:10.175Z

Updated: 2024-10-03T21:40:00.903Z

Reserved: 2024-01-05T01:04:06.642Z

Link: CVE-2024-22053

cve-icon Vulnrichment

Updated: 2024-08-01T22:35:34.816Z

cve-icon NVD

Status : Modified

Published: 2024-04-04T20:15:08.500

Modified: 2024-11-21T08:55:28.270

Link: CVE-2024-22053

cve-icon Redhat

No data.