high7.5

CVE-2024-47007

A NULL pointer dereference in WLAvalancheService.exe of Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to cause a denial of ser…

Impact

A NULL pointer dereference in WLAvalancheService.exe of Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to cause a denial of service.

Affected products

Vendor	Product	Affected versions
Ivanti	Avalanche	before 6.4.5

Weakness classification

CWE-476

References

NVD record
CVE.org record
https://forums.ivanti.com/s/article/Ivanti-Avalanche-6-4-5-Security-Advisory