Lucene search

[email protected]CVE-2024-21894

HistoryApr 04, 2024 - 11:15 p.m.

CVE-2024-21894

2024-04-0423:15:15

CWE-787

[email protected]

web.nvd.nist.gov

heap overflow

ivanti connect secure

policy secure

ipsec

dos attack

arbitrary code execution

cve-2024-21894

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

39.3%

JSON

A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack. In certain conditions this may lead to execution of arbitrary code

Affected configurations

NVD

Node

ivanticonnect_secureMatch9.1r1

ivanticonnect_secureMatch9.1r10

ivanticonnect_secureMatch9.1r11

ivanticonnect_secureMatch9.1r11.5

ivanticonnect_secureMatch9.1r12

ivanticonnect_secureMatch9.1r13

ivanticonnect_secureMatch9.1r14lts

ivanticonnect_secureMatch9.1r15

ivanticonnect_secureMatch9.1r16

ivanticonnect_secureMatch9.1r17

ivanticonnect_secureMatch9.1r18

ivanticonnect_secureMatch9.1r2

ivanticonnect_secureMatch9.1r3

ivanticonnect_secureMatch9.1r4

ivanticonnect_secureMatch9.1r4.1

ivanticonnect_secureMatch9.1r4.2

ivanticonnect_secureMatch9.1r4.3

ivanticonnect_secureMatch9.1r5

ivanticonnect_secureMatch9.1r6

ivanticonnect_secureMatch9.1r7

ivanticonnect_secureMatch9.1r8

ivanticonnect_secureMatch9.1r9

ivanticonnect_secureMatch22.1

ivanticonnect_secureMatch22.2

ivanticonnect_secureMatch22.3

ivanticonnect_secureMatch22.4

ivanticonnect_secureMatch22.5

ivanticonnect_secureMatch22.6

ivantipolicy_secureMatch9.0-

ivantipolicy_secureMatch9.0r1

ivantipolicy_secureMatch9.0r2

ivantipolicy_secureMatch9.0r2.1

ivantipolicy_secureMatch9.0r3

ivantipolicy_secureMatch9.0r3.1

ivantipolicy_secureMatch9.0r4

ivantipolicy_secureMatch9.1-

ivantipolicy_secureMatch9.1r1

ivantipolicy_secureMatch9.1r10

ivantipolicy_secureMatch9.1r11

ivantipolicy_secureMatch9.1r12

ivantipolicy_secureMatch9.1r13

ivantipolicy_secureMatch9.1r14

ivantipolicy_secureMatch9.1r15

ivantipolicy_secureMatch9.1r16

ivantipolicy_secureMatch9.1r17

ivantipolicy_secureMatch9.1r18

ivantipolicy_secureMatch9.1r2

ivantipolicy_secureMatch9.1r3

ivantipolicy_secureMatch9.1r4

ivantipolicy_secureMatch9.1r5

ivantipolicy_secureMatch9.1r6

ivantipolicy_secureMatch9.1r7

ivantipolicy_secureMatch9.1r8

ivantipolicy_secureMatch9.1r9

ivantipolicy_secureMatch22.1

ivantipolicy_secureMatch22.2

ivantipolicy_secureMatch22.3

ivantipolicy_secureMatch22.4

ivantipolicy_secureMatch22.5

ivantipolicy_secureMatch22.6

CPENameOperatorVersion
ivanti:connect_secureivanti connect secureeq9.1
ivanti:connect_secureivanti connect secureeq22.1
ivanti:connect_secureivanti connect secureeq22.2
ivanti:connect_secureivanti connect secureeq22.3
ivanti:connect_secureivanti connect secureeq22.4
ivanti:connect_secureivanti connect secureeq22.5
ivanti:connect_secureivanti connect secureeq22.6
ivanti:policy_secureivanti policy secureeq9.0
ivanti:policy_secureivanti policy secureeq9.1
ivanti:policy_secureivanti policy secureeq22.1

CPE	Name	Operator	Version
ivanti:connect_secure	ivanti connect secure	eq	9.1
ivanti:connect_secure	ivanti connect secure	eq	22.1
ivanti:connect_secure	ivanti connect secure	eq	22.2
ivanti:connect_secure	ivanti connect secure	eq	22.3
ivanti:connect_secure	ivanti connect secure	eq	22.4
ivanti:connect_secure	ivanti connect secure	eq	22.5
ivanti:connect_secure	ivanti connect secure	eq	22.6
ivanti:policy_secure	ivanti policy secure	eq	9.0
ivanti:policy_secure	ivanti policy secure	eq	9.1
ivanti:policy_secure	ivanti policy secure	eq	22.1

Rows per page:

1-10 of 151

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "vendor": "Ivanti",
    "product": "Connect Secure",
    "versions": [
      {
        "version": "22.1R6.2",
        "status": "affected",
        "lessThan": "22.1R6.2",
        "versionType": "semver"
      },
      {
        "version": "22.2R4.2",
        "status": "affected",
        "lessThan": "22.2R4.2",
        "versionType": "semver"
      },
      {
        "version": "22.3R1.2",
        "status": "affected",
        "lessThan": "22.3R1.2",
        "versionType": "semver"
      },
      {
        "version": "22.4R1.2",
        "status": "affected",
        "lessThan": "22.4R1.2",
        "versionType": "semver"
      },
      {
        "version": "22.4R2.4",
        "status": "affected",
        "lessThan": "22.4R2.4",
        "versionType": "semver"
      },
      {
        "version": "22.5R1.3",
        "status": "affected",
        "lessThan": "22.5R1.3",
        "versionType": "semver"
      },
      {
        "version": "22.5R2.4",
        "status": "affected",
        "lessThan": "22.5R2.4",
        "versionType": "semver"
      },
      {
        "version": "22.6R2.3",
        "status": "affected",
        "lessThan": "22.6R2.3",
        "versionType": "semver"
      },
      {
        "version": "9.1R14.6",
        "status": "affected",
        "lessThan": "9.1R14.6",
        "versionType": "semver"
      },
      {
        "version": "9.1R15.4",
        "status": "affected",
        "lessThan": "9.1R15.4",
        "versionType": "semver"
      },
      {
        "version": "9.1R16.4",
        "status": "affected",
        "lessThan": "9.1R16.4",
        "versionType": "semver"
      },
      {
        "version": "9.1R17.4",
        "status": "affected",
        "lessThan": "9.1R17.4",
        "versionType": "semver"
      },
      {
        "version": "9.1R18.5",
        "status": "affected",
        "lessThan": "9.1R18.5",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "vendor": "Ivanti",
    "product": "Policy Secure",
    "versions": [
      {
        "version": "22.4R1.2",
        "status": "affected",
        "lessThan": "22.4R1.2",
        "versionType": "semver"
      },
      {
        "version": "22.6R1.2",
        "status": "affected",
        "lessThan": "22.6R1.2",
        "versionType": "semver"
      },
      {
        "version": "9.1R16.4",
        "status": "affected",
        "lessThan": "9.1R16.4",
        "versionType": "semver"
      },
      {
        "version": "9.1R17.4",
        "status": "affected",
        "lessThan": "9.1R17.4",
        "versionType": "semver"
      },
      {
        "version": "9.1R18.5",
        "status": "affected",
        "lessThan": "9.1R18.5",
        "versionType": "semver"
      }
    ]
  }
]

References

forums.ivanti.com/s/article/SA-CVE-2024-21894-Heap-Overflow-CVE-2024-22052-Null-Pointer-Dereference-CVE-2024-22053-Heap-Overflow-and-CVE-2024-22023-XML-entity-expansion-or-XXE-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US