CVE-2020-12441: Buffer Overflow
First published: Thu Aug 06 2020(Updated: )
Denial-of-Service (DoS) in Ivanti Service Manager HEAT Remote Control 7.4 due to a buffer overflow in the protocol parser of the ‘HEATRemoteService’ agent. The DoS can be triggered by sending a specially crafted network packet.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ivanti Desktop\&server Management | <2020.1 | |
| Ivanti Service Manager HEAT Remote Control | =7.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-12441?
CVE-2020-12441 has been classified as a high severity Denial-of-Service vulnerability.
How does CVE-2020-12441 affect Ivanti Service Manager HEAT Remote Control?
CVE-2020-12441 affects Ivanti Service Manager HEAT Remote Control 7.4 by causing a DoS through a buffer overflow when a specially crafted network packet is received.
How do I mitigate CVE-2020-12441?
Mitigation for CVE-2020-12441 involves upgrading to the latest version of Ivanti Service Manager HEAT Remote Control that addresses the buffer overflow vulnerability.
What specific versions are affected by CVE-2020-12441?
Ivanti Service Manager HEAT Remote Control version 7.4 and Ivanti Desktop & Server Management versions prior to 2020.1 are affected by CVE-2020-12441.
What is the impact of exploiting CVE-2020-12441?
Exploiting CVE-2020-12441 allows an attacker to crash the service, resulting in a denial of service for legitimate users.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/author
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/description
- agent/tags
- agent/source
- vendor/ivanti
- canonical/ivanti desktop\&server management
- canonical/ivanti service manager heat remote control
- version/ivanti service manager heat remote control/7.4