CVE-2023-32560: Buffer Overflow
Published Aug 10, 2023
·Updated
An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution.
Thanks to a Researcher at Tenable for finding and reporting.
Fixed in version 6.4.1.
Credit
Robel Campbell
Affected Software
3 affected components
Ivanti Avalanche<6.4.1
Ivanti Avalanche=6.4.2.313
Ivanti Avalanche=6.3.1
Event History
Aug 10, 2023
CVE Published
via MITRE·07:07 PM
Data Sourced
via MITRE·07:07 PM
DescriptionSeverity
Sep 4, 2023
Exploit Published
12:00 AM
Known Exploited
12:00 AM
Dec 20, 2023
News Published
06:03 PM
Apr 16, 2024
News Published
via BleepingComputer·07:52 PM
News Published
via BleepingComputer·07:53 PM
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-32560.
2
What is the severity of CVE-2023-32560?
The severity of CVE-2023-32560 is critical, with a severity value of 9.8.
3
How can an attacker exploit the CVE-2023-32560 vulnerability?
An attacker can exploit the CVE-2023-32560 vulnerability by sending a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution.
4
What software versions are affected by CVE-2023-32560?
The Ivanti Avalanche software versions up to and excluding 6.4.1 are affected by CVE-2023-32560.
5
How can I fix CVE-2023-32560?
CVE-2023-32560 can be fixed by updating to version 6.4.1 of Ivanti Avalanche.