CVE-2024-9843

Published: Nov 12, 2024Modified: Jan 17, 2025

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

A buffer over-read in Ivanti Secure Access Client before 22.7R4 allows a local unauthenticated attacker to cause a denial of service.

Affected (6)

Products: Ivanti: Secure Access Client

1 product

Secure Access Client

Configuration A

6 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ivanti Secure Access Client	Before 22.7
Ivanti Secure Access Client	Version 22.7
Ivanti Secure Access Client	Version 22.7 r1.1
Ivanti Secure Access Client	Version 22.7 r1
Ivanti Secure Access Client	Version 22.7 r2
Ivanti Secure Access Client	Version 22.7 r3

Running on/with	Platform Versions
Apple Macos	All versions

Related CWEs

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

Buffer Over-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

References (1)

https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs

Source: 3c1d8aa1-5a33-4ea4-8992-aadd6440af75

Vendor Advisory

Timeline

No history available yet.