CVE-2024-23531

An Integer Overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows an unauthenticated remote attacker to perform denial of service attacks. In certain rare conditions this could also lead to reading content from memory...

The vulnerability of the WLInfoRailService component in the Avalanche mobile device management system allows a hacker to trigger a service failure.

The vulnerability of the WLInfoRailService component in the Avalanche mobile device management system is related to integer overflow during the processing of field lengths. Exploiting this vulnerability could allow an attacker to cause service failures...

PT-2024-2925 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: The issue is related to an integer overflow in the WLInfoRailService component when handling field lengths. This can be exploited by a remote attacker to cause a denial of service. In rare...