A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x
22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack or in certain conditions read contents from memory.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: hackerone
Published: 2024-04-04T19:45:10.175Z
Updated: 2024-06-20T14:53:02.390Z
Reserved: 2024-01-05T01:04:06.642Z
Link: CVE-2024-22053
JSON object: View
NVD Information
Status : Analyzed
Published: 2024-04-04T20:15:08.500
Modified: 2024-04-08T22:53:03.443
Link: CVE-2024-22053
JSON object: View
Redhat Information
No data.
CWE