CVE-2023-46803

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS...

CVE-2023-46220

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-41727

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-46217

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-46222

Ivanti Avalanche WLAvalancheService is affected by CVE-2023-46222. The issue is a stack-based buffer/ memory corruption vulnerability in the WLAvalancheService that can be triggered by receiving specially crafted data packets over the Mobile Device Server, potentially enabling Denial of Service o...

CVE-2023-46803

Ivanti Avalanche WLAvalancheService contains a Divide By Zero Denial-of-Service vulnerability. In Ivanti Avalanche’s WLAvalancheService (Mobile Device Server), an attacker can send specially crafted packets to trigger a memory corruption condition via an integer division error, enabling a remote ...

CVE-2023-46258

Ivanti Avalanche (WLAvalancheService) is affected by CVE-2023-46258. A memory corruption vulnerability can be triggered by sending specially crafted data packets to the Mobile Device Server, potentially causing a Denial of Service or remote code execution. Affected component: WLAvalancheService i...

CVE-2023-46224

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-46222

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-46224

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-46224

Ivanti Avalanche vulnerable in WLAvalancheService: a memory corruption due to crafted data packets to the Mobile Device Server can trigger DoS or remote code execution (CVE-2023-46224). Affects Avalanche versions prior to fixed release; remediation cited by Ivanti is to update to Avalanche 6.4.2 ...

CVE-2023-46223

CVE-2023-46223 affects Ivanti Avalanche/WLAvalancheService (Mobile Device Server). The vulnerability is described as memory corruption/stack-based buffer overflow that can be triggered by specially crafted data packets, potentially enabling Denial of Service or remote code execution. Exploitation...

CVE-2023-46217

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-46260

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-46225

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-46220

Ivanti Avalanche is affected by CVE-2023-46220 via a stack-based buffer overflow in the WLAvalancheService that handles Mobile Device Server data packets. The vulnerability can cause memory corruption and may lead to Denial of Service or remote code execution. Public sources (including ZDI and Ne...

CVE-2023-46257

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service DoS or code execution...

CVE-2023-46804

CVE-2023-46804 affects Ivanti Avalanche’s WLAvalancheService (Mobile Device Server) and is described in connected documents as causing memory corruption via specially crafted data packets, leading to a Denial-of-Service. The ZDI advisory attributes the root cause to an integer underflow in WLAval...

CVE-2023-46216

CVE-2023-46216 affects Ivanti Avalanche (Mobile Device Server) prior to version 6.4.2. The vulnerability is described as memory corruption triggered by specially crafted data packets to the Mobile Device Server, leading to Denial of Service or remote code execution. Public sources (NVD/Red Hat/CN...

CVE-2023-41727

CVE-2023-41727 describes a memory corruption vulnerability in Ivanti Avalanche’s Mobile Device Server component, exploitable by specially crafted packets to cause DoS or remote code execution. Public docs tie this to Ivanti Avalanche prior to version 6.4.2 (noting a 9.8/critical impact per CVSS i...