CVE-2024-37377: Buffer Overflow
Published Dec 11, 2024
·Updated
A heap-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a denial of service.
Affected Software
17 affected components
Ivanti Connect Secure<22.7R2.3
Ivanti Connect Secure<22.7
Ivanti Connect Secure=22.7
Ivanti Connect Secure=22.7-r1
Ivanti Connect Secure=22.7-r1.1
Ivanti Connect Secure=22.7-r1.2
Ivanti Connect Secure=22.7-r1.3
Ivanti Connect Secure=22.7-r1.4
Ivanti Connect Secure=22.7-r1.5
Ivanti Connect Secure=22.7-r2
Ivanti Connect Secure=22.7-r2.1
Ivanti Connect Secure=22.7-r2.2
Ivanti Connect Secure=22.7-r2.3
Ivanti Policy Secure<22.7
Ivanti Policy Secure=22.7
Ivanti Policy Secure=22.7-r1
Ivanti Policy Secure=22.7-r1.1
Event History
Dec 11, 2024
CVE Published
via MITRE·06:52 PM
Data Sourced
via MITRE·06:52 PM
DescriptionSeverity
Dec 12, 2024
Data Sourced
via NVD·01:55 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-37377?
CVE-2024-37377 has a high severity rating due to its potential to cause denial of service.
2
How do I fix CVE-2024-37377?
To fix CVE-2024-37377, upgrade Ivanti Connect Secure to version 22.7R2.3 or later.
3
What impact does CVE-2024-37377 have on my system?
CVE-2024-37377 can allow an unauthenticated remote attacker to exploit a buffer overflow and potentially disrupt service.
4
Is CVE-2024-37377 exploitable in my current environment?
CVE-2024-37377 is exploitable in Ivanti Connect Secure versions prior to 22.7R2.3.
5
Who is affected by CVE-2024-37377?
Organizations using Ivanti Connect Secure versions before 22.7R2.3 are affected by CVE-2024-37377.