PT-2024-2930 · Ivanti · Ivanti Avalanche

Published 2024-03-18 · Updated 2025-05-06 · CVE-2024-29204

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ivanti Avalanche versions prior to 6.4.3

Description The issue is related to a heap overflow vulnerability in the WLAvalancheService component. This vulnerability can be exploited by a remote unauthenticated attacker to execute arbitrary commands. The vulnerability is associated with a buffer overflow in dynamic memory.

Recommendations For versions prior to 6.4.3, update to version 6.4.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the WLAvalancheService component to minimize the risk of exploitation.

Fix

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

BDU:2024-03095

CVE-2024-29204

Affected Products

Ivanti Avalanche

References · 14

• https://nvd.nist.gov/vuln/detail/CVE-2024-29204 · Security Note
• https://osv.dev/vulnerability/CVE-2024-29204 · Vendor Advisory
• https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-03095 · Security Note
• https://twitter.com/catnap707/status/1781094775900512595 · Twitter Post
• https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US&languageenUS= · Note
• https://twitter.com/opsmatters_uk/status/1783939683019293013 · Twitter Post
• https://twitter.com/AWNetworks/status/1784991514856153374 · Twitter Post
• https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US&languageenUS= · Note
• https://twitter.com/socradar/status/1780622985826590964 · Twitter Post
• https://t.me/pentestingnews/46092 · Telegram Post
• https://t.me/true_secator/5650 · Telegram Post
• https://t.me/cvenotify/120978 · Telegram Post
• https://t.me/cybersecuritytechnologies/10362 · Telegram Post