222 matches found
CVE-2023-46217
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...
CVE-2023-46224
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...
CVE-2023-46804
CVE-2023-46804 affects Ivanti Avalanche’s WLAvalancheService (Mobile Device Server) and is described in connected documents as causing memory corruption via specially crafted data packets, leading to a Denial-of-Service. The ZDI advisory attributes the root cause to an integer underflow in WLAval...
CVE-2023-46223
CVE-2023-46223 affects Ivanti Avalanche/WLAvalancheService (Mobile Device Server). The vulnerability is described as memory corruption/stack-based buffer overflow that can be triggered by specially crafted data packets, potentially enabling Denial of Service or remote code execution. Exploitation...
CVE-2023-46259
Ivanti Avalanche WLAvalancheService is affected by a stack-based buffer overflow vulnerability (CVE-2023-46259) that can be triggered by specially crafted data packets sent to the Mobile Device Server, potentially causing memory corruption, DoS, or remote code execution. Remediation is to upgrade...
CVE-2023-46224
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...
CVE-2023-46217
CVE-2023-46217 affects Ivanti Avalanche (Mobile Device Server) prior to 6.4.2. The vulnerability stems from memory corruption triggered by specially crafted data packets sent to the Mobile Device Server, which could lead to a Denial of Service or remote code execution. Multiple sources corroborat...
CVE-2023-46804
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS...
CVE-2023-46265
Ivanti Avalanche includes CVE-2023-46265 (XXE vulnerability in the Smart Device Server) that can allow an unauthenticated attacker to leak data or perform a Server-Side Request Forgery (SSRF). The issue is tied to a decode/XML processing path and is listed among multiple related CVEs in the 6.4.2...
CVE-2023-46217
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...
CVE-2023-46223
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...
CVE-2023-46257
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...
CVE-2023-46803
Ivanti Avalanche WLAvalancheService contains a Divide By Zero Denial-of-Service vulnerability. In Ivanti Avalanche’s WLAvalancheService (Mobile Device Server), an attacker can send specially crafted packets to trigger a memory corruption condition via an integer division error, enabling a remote ...
CVE-2023-46260
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...
CVE-2023-46257
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...
CVE-2023-41727
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...
CVE-2023-46225
This entry covers CVE-2023-46225 affecting Ivanti Avalanche. The vulnerability is a stack-based buffer overflow in WLAvalancheService (Mobile Device Server) that can be triggered by specially crafted data packets, causing memory corruption and potentially remote code execution or Denial of Servic...
CVE-2023-46265
An unauthenticated could abuse a XXE vulnerability in the Smart Device Server to leak data or perform a Server-Side Request Forgery SSRF...
CVE-2023-46216
CVE-2023-46216 affects Ivanti Avalanche (Mobile Device Server) prior to version 6.4.2. The vulnerability is described as memory corruption triggered by specially crafted data packets to the Mobile Device Server, leading to Denial of Service or remote code execution. Public sources (NVD/Red Hat/CN...