CVE-2024-21894
Assigner: hackerone
Published: 2024-04-04T22:16:29.330Z
State: PUBLISHED
descriptions: value: A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack. In certain conditions this may lead to execution of arbitrary code 
affected: defaultStatus: unaffected
vendor: Ivanti
product: Connect Secure
versions: version: 22.1R6.2
status: affected
lessThan: 22.1R6.2
versionType: semver
version: 22.2R4.2
status: affected
lessThan: 22.2R4.2
versionType: semver
version: 22.3R1.2
status: affected
lessThan: 22.3R1.2
versionType: semver
version: 22.4R1.2
status: affected
lessThan: 22.4R1.2
versionType: semver
version: 22.4R2.4
status: affected
lessThan: 22.4R2.4
versionType: semver
version: 22.5R1.3
status: affected
lessThan: 22.5R1.3
versionType: semver
version: 22.5R2.4
status: affected
lessThan: 22.5R2.4
versionType: semver
version: 22.6R2.3
status: affected
lessThan: 22.6R2.3
versionType: semver
version: 9.1R14.6
status: affected
lessThan: 9.1R14.6
versionType: semver
version: 9.1R15.4
status: affected
lessThan: 9.1R15.4
versionType: semver
version: 9.1R16.4
status: affected
lessThan: 9.1R16.4
versionType: semver
version: 9.1R17.4
status: affected
lessThan: 9.1R17.4
versionType: semver
version: 9.1R18.5
status: affected
lessThan: 9.1R18.5
versionType: semver
defaultStatus: unaffected
vendor: Ivanti
product: Policy Secure
versions: version: 22.4R1.2
status: affected
lessThan: 22.4R1.2
versionType: semver
version: 22.6R1.2
status: affected
lessThan: 22.6R1.2
versionType: semver
version: 9.1R16.4
status: affected
lessThan: 9.1R16.4
versionType: semver
version: 9.1R17.4
status: affected
lessThan: 9.1R17.4
versionType: semver
version: 9.1R18.5
status: affected
lessThan: 9.1R18.5
versionType: semver
metrics: cvssV3_0: version: 3.0
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
baseScore: 8.2
baseSeverity: HIGH