CVE-2024-36136

creationtimestamp| type| source ---|---|--- 2024-08-14 05:40:27+00:00| seen| https://t.me/cvedetector/3096...

CVE-2024-36136

Ivanti Avalanche 6.3.1 is affected by multiple CVEs: CVE-2024-36136 (off-by-one in WLInfoRailService) can crash the service and cause DoS; CVE-2024-37373 (Central Filestore) may enable remote RCE with admin rights; CVE-2024-37399 (WLAvalancheService) on NULL pointer dereference; CVE-2024-38652 (s...

CVE-2024-36136

An off-by-one error in WLInfoRailService in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to crash the service, resulting in a DoS...

Security Advisory Ivanti Avalanche 6.4.4 (CVE-2024-38652, CVE-2024-38653, CVE-2024-36136, CVE-2024-37399, CVE-2024-37373)

Ivanti has released updates for Ivanti Avalanche, in version 6.4.4, which addresses high severity vulnerabilities. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure. Vulnerability Details: CVE Number | Description | CVSS Score Severity | CVSS...