Lucene search

K
zdiPiotr Bazydlo (@chudypb) of Trend Micro Zero Day InitiativeZDI-24-381
HistoryApr 23, 2024 - 12:00 a.m.

Ivanti Avalanche WLAvalancheService Null Pointer Dereference Denial-of-Service Vulnerability

2024-04-2300:00:00
Piotr Bazydlo (@chudypb) of Trend Micro Zero Day Initiative
www.zerodayinitiative.com
6
ivanti avalanche
wlavalancheservice
denial-of-service
vulnerability
tcp port 1777
null pointer dereference

0.001 Low

EPSS

Percentile

28.8%

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ivanti Avalanche. Authentication is required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService, which listens on TCP port 1777 by default. The issue results from dereferencing a null pointer. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.

0.001 Low

EPSS

Percentile

28.8%

Related for ZDI-24-381