CVE-2021-22934: Buffer Overflow
Published Aug 16, 2021
·Updated
A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator or compromised Pulse Connect Secure device in a load-balanced configuration to perform a buffer overflow via a malicious crafted web request.
Affected Software
25 affected components
PulseSecure Pulse Connect Secure<9.1
PulseSecure Pulse Connect Secure=9.1
PulseSecure Pulse Connect Secure=9.1-r1.0
PulseSecure Pulse Connect Secure=9.1-r10.0
PulseSecure Pulse Connect Secure=9.1-r11.0
PulseSecure Pulse Connect Secure=9.1-r2.0
PulseSecure Pulse Connect Secure=9.1-r3.0
PulseSecure Pulse Connect Secure=9.1-r4.0
PulseSecure Pulse Connect Secure=9.1-r5.0
PulseSecure Pulse Connect Secure=9.1-r6.0
PulseSecure Pulse Connect Secure=9.1-r7.0
PulseSecure Pulse Connect Secure=9.1-r8.0
PulseSecure Pulse Connect Secure=9.1-r9.0
Ivanti Connect Secure=9.1
Ivanti Connect Secure=9.1-r1.0
Ivanti Connect Secure=9.1-r10.0
Ivanti Connect Secure=9.1-r11.0
Ivanti Connect Secure=9.1-r2.0
Ivanti Connect Secure=9.1-r3.0
Ivanti Connect Secure=9.1-r4.0
Ivanti Connect Secure=9.1-r5.0
Ivanti Connect Secure=9.1-r6.0
Ivanti Connect Secure=9.1-r7.0
Ivanti Connect Secure=9.1-r8.0
Ivanti Connect Secure=9.1-r9.0
Event History
Aug 16, 2021
CVE Published
via MITRE·06:38 PM
Data Sourced
via MITRE·06:38 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2021-22934.
2
What is the severity of CVE-2021-22934?
The severity of CVE-2021-22934 is high with a severity value of 7.2.
3
What software versions are affected by CVE-2021-22934?
The software versions affected by CVE-2021-22934 are Pulse Connect Secure before 9.1R12.
4
How can an authenticated administrator or compromised device exploit CVE-2021-22934?
An authenticated administrator or compromised device in a load-balanced configuration can exploit CVE-2021-22934 by performing a buffer overflow via a malicious crafted web request.
5
Is there a fix available for CVE-2021-22934?
Yes, a fix is available for CVE-2021-22934 in Pulse Connect Secure 9.1R12 or later versions.