Ivanti Avalanche < 6.4.2 Multiple Vulnerabilities

The version of Ivanti Avalanche running on the remote host is prior to 6.4.2. It is, therefore, is affected by multiple vulnerabilities : - An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or...

CVE-2023-46217

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-46217

CVE-2023-46217 affects Ivanti Avalanche (Mobile Device Server) prior to 6.4.2. The vulnerability stems from memory corruption triggered by specially crafted data packets sent to the Mobile Device Server, which could lead to a Denial of Service or remote code execution. Multiple sources corroborat...

Avalanche 6.4.2 Security Hardening and CVEs addressed

Avalanche 6.4.2 has addressed some new security hardening in our 2023 Quarter 4 release. To address the security vulnerabilities listed below, it is highly recommended to download the Avalanche installer and udpate to the latest Avalanche 6.4.2. The installation will apply a fix for each CVE list...