CVE-2024-36136

7.5HIGH

An off-by-one error in WLInfoRailService in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to crash the service, resulting in a DoS.

Published: 8/14/2024Updated: 8/15/2024

Description

An off-by-one error in WLInfoRailService in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to crash the service, resulting in a DoS.

AI AnalysisPowered by AI

Affected Products

ivantiavalanche
6.3.1
ivantiavalanche
6.3.1.1507
ivantiavalanche
6.3.2
ivantiavalanche
6.3.2
ivantiavalanche
6.3.2
ivantiavalanche
6.3.2.3490
ivantiavalanche
6.3.2.3490
ivantiavalanche
6.3.3
ivantiavalanche
6.3.3
ivantiavalanche
6.3.3.101
ivantiavalanche
6.3.3.101
ivantiavalanche
6.3.4
ivantiavalanche
6.3.4
ivantiavalanche
6.3.4.153
ivantiavalanche
6.4.0
ivantiavalanche
6.4.1
ivantiavalanche
6.4.1
ivantiavalanche
6.4.1.207
ivantiavalanche
6.4.1.236
ivantiavalanche
6.4.2

References