CVE-2023-46217

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-46216

CVE-2023-46216 affects Ivanti Avalanche (Mobile Device Server) prior to version 6.4.2. The vulnerability is described as memory corruption triggered by specially crafted data packets to the Mobile Device Server, leading to Denial of Service or remote code execution. Public sources (NVD/Red Hat/CN...

CVE-2023-46258

Ivanti Avalanche (WLAvalancheService) is affected by CVE-2023-46258. A memory corruption vulnerability can be triggered by sending specially crafted data packets to the Mobile Device Server, potentially causing a Denial of Service or remote code execution. Affected component: WLAvalancheService i...

CVE-2023-46224

Ivanti Avalanche vulnerable in WLAvalancheService: a memory corruption due to crafted data packets to the Mobile Device Server can trigger DoS or remote code execution (CVE-2023-46224). Affects Avalanche versions prior to fixed release; remediation cited by Ivanti is to update to Avalanche 6.4.2 ...

CVE-2023-46220

Ivanti Avalanche is affected by CVE-2023-46220 via a stack-based buffer overflow in the WLAvalancheService that handles Mobile Device Server data packets. The vulnerability can cause memory corruption and may lead to Denial of Service or remote code execution. Public sources (including ZDI and Ne...

CVE-2023-46803

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS...

CVE-2023-46225

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-41727

CVE-2023-41727 describes a memory corruption vulnerability in Ivanti Avalanche’s Mobile Device Server component, exploitable by specially crafted packets to cause DoS or remote code execution. Public docs tie this to Ivanti Avalanche prior to version 6.4.2 (noting a 9.8/critical impact per CVSS i...

CVE-2023-46803

Ivanti Avalanche WLAvalancheService contains a Divide By Zero Denial-of-Service vulnerability. In Ivanti Avalanche’s WLAvalancheService (Mobile Device Server), an attacker can send specially crafted packets to trigger a memory corruption condition via an integer division error, enabling a remote ...

CVE-2023-46259

Ivanti Avalanche WLAvalancheService is affected by a stack-based buffer overflow vulnerability (CVE-2023-46259) that can be triggered by specially crafted data packets sent to the Mobile Device Server, potentially causing memory corruption, DoS, or remote code execution. Remediation is to upgrade...

PT-2023-29911 · Unknown · Mobile Device Server

Name of the Vulnerable Software and Affected Versions: Mobile Device Server affected versions not specified Description: An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption, which could result in a Denial of Service DoS or code execution...

Wavelink Avalanche Security Vulnerability

Wavelink Avalanche is a mobile device management system from Wavelink, Inc. in the United States. A security vulnerability exists in Wavelink Avalanche version 6.4.2. An attacker could exploit this vulnerability by sending specially crafted packets to the mobile device server, which could result ...

PT-2023-29912 · Unknown · Mobile Device Server

Name of the Vulnerable Software and Affected Versions: Mobile Device Server affected versions not specified Description: An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption, which could result in a Denial of Service DoS or code execution...

Wavelink Avalanche Security Vulnerability

Wavelink Avalanche is a mobile device management system from Wavelink, Inc. in the United States. A security vulnerability exists in Wavelink Avalanche version 6.4.2. An attacker could exploit the vulnerability by sending specially crafted packets to the mobile device server, resulting in memory...

Wavelink Avalanche Security Vulnerability

Wavelink Avalanche is a mobile device management system from Wavelink, Inc. in the United States. A security vulnerability exists in Wavelink Avalanche version 6.4.2. An attacker could exploit this vulnerability by sending specially crafted packets to the mobile device server, which could result ...

Wavelink Avalanche Security Vulnerability

Wavelink Avalanche is a mobile device management system from Wavelink, Inc. in the United States. A security vulnerability exists in Wavelink Avalanche version 6.4.2. An attacker could exploit the vulnerability by sending specially crafted packets to the mobile device server, resulting in memory...

Wavelink Avalanche Security Vulnerability

Wavelink Avalanche is a mobile device management system from Wavelink, Inc. in the United States. A security vulnerability exists in Wavelink Avalanche version 6.4.2. An attacker could exploit this vulnerability by sending specially crafted packets to the mobile device server, which could result ...

PT-2023-8331 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions affected versions not specified Description: The issue is related to a stack-based buffer overflow in the WLAvalancheService of the Ivanti Avalanche system, which can be exploited by an attacker sending specially...

PT-2023-8332 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions affected versions not specified Description: The issue is related to a stack-based buffer overflow in the WLAvalancheService of the Ivanti Avalanche system, which can be exploited by an attacker sending specially...

PT-2023-8294 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche affected versions not specified Description: The issue is related to a Denial of Service DoS that can be caused by an attacker sending specially crafted data packets to the Mobile Device Server, resulting in memory corruption...