Lucene search

HackeroneVULNRICHMENT:CVE-2024-21894

HistoryApr 04, 2024 - 10:16 p.m.

CVE-2024-21894

2024-04-0422:16:29

hackerone

github.com

ivanti

connect secure

policy secure

heap overflow

unauthenticated user

dos attack

arbitrary code

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

7.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

39.3%

JSON

A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack. In certain conditions this may lead to execution of arbitrary code

CNA Affected

[
  {
    "vendor": "Ivanti",
    "product": "Connect Secure",
    "versions": [
      {
        "status": "affected",
        "version": "22.1R6.2",
        "lessThan": "22.1R6.2",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "22.2R4.2",
        "lessThan": "22.2R4.2",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "22.3R1.2",
        "lessThan": "22.3R1.2",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "22.4R1.2",
        "lessThan": "22.4R1.2",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "22.4R2.4",
        "lessThan": "22.4R2.4",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "22.5R1.3",
        "lessThan": "22.5R1.3",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "22.5R2.4",
        "lessThan": "22.5R2.4",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "22.6R2.3",
        "lessThan": "22.6R2.3",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "9.1R14.6",
        "lessThan": "9.1R14.6",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "9.1R15.4",
        "lessThan": "9.1R15.4",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "9.1R16.4",
        "lessThan": "9.1R16.4",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "9.1R17.4",
        "lessThan": "9.1R17.4",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "9.1R18.5",
        "lessThan": "9.1R18.5",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Ivanti",
    "product": "Policy Secure",
    "versions": [
      {
        "status": "affected",
        "version": "22.4R1.2",
        "lessThan": "22.4R1.2",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "22.6R1.2",
        "lessThan": "22.6R1.2",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "9.1R16.4",
        "lessThan": "9.1R16.4",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "9.1R17.4",
        "lessThan": "9.1R17.4",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "9.1R18.5",
        "lessThan": "9.1R18.5",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

forums.ivanti.com/s/article/SA-CVE-2024-21894-Heap-Overflow-CVE-2024-22052-Null-Pointer-Dereference-CVE-2024-22053-Heap-Overflow-and-CVE-2024-22023-XML-entity-expansion-or-XXE-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

7.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

39.3%

JSON

Related for VULNRICHMENT:CVE-2024-21894