Skip to main content

Unauthenticated Stack-based Buffer Overflow Vulnerability in Ivanti Avalanche

High severity vulnerability could allow attackers to cause service disruption or perform arbitrary code execution on Ivanti Avalanche

Threat ID:
CC-4367
Threat Severity:
Medium
Published:
17 August 2023 11:53 AM
Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

High severity vulnerability could allow attackers to cause service disruption or perform arbitrary code execution on Ivanti Avalanche

Affected platforms

The following platforms are known to be affected:

Versions: 6.4.0 and older

Ivanti Avalanche

Threat details

Introduction

Ivanti has released a security advisory addressing a high severity vulnerability in Ivanti Avalanche. CVE-2023-32560 is an unauthenticated stack-based buffer overflow vulnerability that could allow an attacker to send a specially crafted message to the Wavelink Avalanche Manager, which could lead to service disruption or arbitrary code execution.

The security advisory also contains six additional vulnerabilities that affect Ivanti Avalanche.

Remediation advice

Affected organisations are advised to review Ivanti security advisory and apply any relevant updates.

Last edited: 17 August 2023 11:53 am