Remote Unauth DoS Vulnerability in Ivanti Avalanche 6.3.1

CVE-2024-37399

Summary

A vulnerability exists in the WLAvalancheService within Ivanti Avalanche version 6.3.1, where a NULL pointer dereference can be exploited by remote unauthenticated attackers. This flaw can lead to the unintentional crashing of the service, thereby affecting its stability. The potential for denial of service presents a significant concern for organizations relying on Ivanti Avalanche for effective management and security of their mobile and device infrastructures.

References