CVE-2024-38649

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-38649
An out-of-bounds write in IPsec of Ivanti Connect Secure before version 22.7R2.1(Not Applicable to 9.1Rx) allows a remote unauthenticated attacker to cause a denial of service.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs
Configurations

No configuration.

History

23 Nov 2024, 21:15

Type Values Removed Values Added
Summary (en) An out-of-bounds write in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote unauthenticated attacker to cause a denial of service. (en) An out-of-bounds write in IPsec of Ivanti Connect Secure before version 22.7R2.1(Not Applicable to 9.1Rx) allows a remote unauthenticated attacker to cause a denial of service.

13 Nov 2024, 17:35

Type Values Removed Values Added
CWE CWE-125

13 Nov 2024, 17:01

Type Values Removed Values Added
Summary
  • (es) Una escritura fuera de los límites en IPsec de Ivanti Connect Secure anterior a la versión 22.7R2.1 permite que un atacante remoto no autenticado provoque una denegación de servicio.

13 Nov 2024, 02:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-11-13 02:15

Updated : 2024-11-23 21:15

NVD link : CVE-2024-38649

Mitre link : CVE-2024-38649

CVE.ORG link : CVE-2024-38649

JSON object : View

Products Affected

No product.

CWE
CWE-125

Out-of-bounds Read