by Kastro
Paper/Archive/CVE-2024-21894

CVE-2024-21894

Ivanti Connect Secure — A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated…

EPSS 19%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 97.3.973 × 2019.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack. In certain conditions this may lead to execution of arbitrary code

Affected

ProductAffectedFixed inSource
Connect Secure22.1R6.2 – < 22.1R6.222.1R6.2CNA
Connect Secure22.2R4.2 – < 22.2R4.222.2R4.2CNA
Connect Secure22.3R1.2 – < 22.3R1.222.3R1.2CNA
Connect Secure22.4R1.2 – < 22.4R1.222.4R1.2CNA
Connect Secure22.4R2.4 – < 22.4R2.422.4R2.4CNA
Connect Secure22.5R1.3 – < 22.5R1.322.5R1.3CNA
Connect Secure22.5R2.4 – < 22.5R2.422.5R2.4CNA
Connect Secure22.6R2.3 – < 22.6R2.322.6R2.3CNA
Connect Secure9.1R14.6 – < 9.1R14.69.1R14.6CNA
Connect Secure9.1R15.4 – < 9.1R15.49.1R15.4CNA
Connect Secure9.1R16.4 – < 9.1R16.49.1R16.4CNA
Connect Secure9.1R17.4 – < 9.1R17.49.1R17.4CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
hackerone (CNA)8.2CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refforums.ivanti.com/s/article/SA-CVE-2024-21894-Heap-Overflow-CVE-2024-22052-Null-Pointer-Dereference-CVE-2024-22053-Heap-Overflow-and-CVE-2024-22023-XML-entity-expansion-or-XXE-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US