CVE-2023-38036: Buffer Overflow
Published Jul 12, 2025
·Updated
A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to create a buffer overflow that could result in service disruption or arbitrary code execution.
Affected Software
2 affected components
Ivanti Avalanche Manager<6.4.1
Ivanti Avalanche<6.4.1
Event History
Jul 12, 2025
CVE Published
via MITRE·03:30 AM
Data Sourced
via MITRE·03:30 AM
Description
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-38036?
CVE-2023-38036 is a critical vulnerability with the potential for arbitrary code execution and service disruption.
2
How do I fix CVE-2023-38036?
To fix CVE-2023-38036, upgrade Ivanti Avalanche Manager to version 6.4.1 or a later version.
3
Who is affected by CVE-2023-38036?
CVE-2023-38036 affects users of Ivanti Avalanche Manager versions prior to 6.4.1.
4
What can attackers do with CVE-2023-38036?
Attackers can exploit CVE-2023-38036 to create a buffer overflow leading to service disruptions or executing arbitrary code.
5
Is CVE-2023-38036 exploitable remotely?
Yes, CVE-2023-38036 may be exploited by unauthenticated attackers remotely.