CVE-2023-32560: Buffer Overflow
An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution.
Thanks to a Researcher at Tenable for finding and reporting.
Fixed in version 6.4.1.
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Wavelink Avalanche Managerto a version that resolves this vulnerability.Fixed in 6.4.1
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-32560.
What is the severity of CVE-2023-32560?
The severity of CVE-2023-32560 is critical, with a severity value of 9.8.
How can an attacker exploit the CVE-2023-32560 vulnerability?
An attacker can exploit the CVE-2023-32560 vulnerability by sending a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution.
What software versions are affected by CVE-2023-32560?
The Ivanti Avalanche software versions up to and excluding 6.4.1 are affected by CVE-2023-32560.
How can I fix CVE-2023-32560?
CVE-2023-32560 can be fixed by updating to version 6.4.1 of Ivanti Avalanche.