A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x
22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack or in certain conditions read contents from memory.
Metrics
Affected Vendors & Products
History
No history.
MITRE
Status: PUBLISHED
Assigner: hackerone
Published: 2024-04-04T19:45:10.175Z
Updated: 2024-08-01T22:35:34.816Z
Reserved: 2024-01-05T01:04:06.642Z
Link: CVE-2024-22053
Vulnrichment
Updated: 2024-08-01T22:35:34.816Z
NVD
Status : Modified
Published: 2024-04-04T20:15:08.500
Modified: 2024-07-03T01:47:01.167
Link: CVE-2024-22053
Redhat
No data.