CVE-2023-46217

CVE-2023-46217 affects Ivanti Avalanche (Mobile Device Server) prior to 6.4.2. The vulnerability stems from memory corruption triggered by specially crafted data packets sent to the Mobile Device Server, which could lead to a Denial of Service or remote code execution. Multiple sources corroborat...

CVE-2023-46217

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-41727

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-46257

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-46804

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS...

CVE-2023-46257

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-46258

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-46259

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-46260

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-46220

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-46222

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-46223

CVE-2023-46223 affects Ivanti Avalanche/WLAvalancheService (Mobile Device Server). The vulnerability is described as memory corruption/stack-based buffer overflow that can be triggered by specially crafted data packets, potentially enabling Denial of Service or remote code execution. Exploitation...

CVE-2023-46221

CVE-2023-46221 affects Ivanti Avalanche: WLAvalancheService stack-based buffer overflow in the Mobile Device Server that can lead to memory corruption with DoS or remote code execution. Exploitation described as remote, with no authentication required in some advisories. The issue is addressed in...

CVE-2023-46222

Ivanti Avalanche WLAvalancheService is affected by CVE-2023-46222. The issue is a stack-based buffer/ memory corruption vulnerability in the WLAvalancheService that can be triggered by receiving specially crafted data packets over the Mobile Device Server, potentially enabling Denial of Service o...

CVE-2023-46225

This entry covers CVE-2023-46225 affecting Ivanti Avalanche. The vulnerability is a stack-based buffer overflow in WLAvalancheService (Mobile Device Server) that can be triggered by specially crafted data packets, causing memory corruption and potentially remote code execution or Denial of Servic...

CVE-2023-41727

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-46265

Ivanti Avalanche includes CVE-2023-46265 (XXE vulnerability in the Smart Device Server) that can allow an unauthenticated attacker to leak data or perform a Server-Side Request Forgery (SSRF). The issue is tied to a decode/XML processing path and is listed among multiple related CVEs in the 6.4.2...

CVE-2023-46260

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-46257

CVE-2023-46257 affects Ivanti Avalanche/WLAvalancheService. A specially crafted data packet to the Mobile Device Server can cause memory corruption, leading to Denial of Service or remote code execution. Public sources (NVD/Nessus and Ivanti advisories) describe the vulnerability as a stack-based...

CVE-2023-46217

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...