CVE-2024-9420: Use After Free

First published: Tue Nov 12 2024(Updated: )

A use-after-free in Ivanti Connect Secure before version 22.7R2.3 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker to achieve remote code execution

Credit: 3c1d8aa1-5a33-4ea4-8992-aadd6440af75

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/weakness
• agent/references
• agent/type
• agent/first-publish-date
• agent/author
• collector/mitre-cve
• source/MITRE
• agent/description
• agent/trending
• agent/epss
• collector/epss-latest
• source/FIRST
• collector/nvd-api
• source/NVD
• agent/software-canonical-lookup
• agent/severity
• agent/last-modified-date
• agent/softwarecombine
• agent/event
• agent/tags
• agent/source
• vendor/ivanti
• canonical/ivanti connect secure
• version/ivanti connect secure/21.9
• version/ivanti connect secure/9.1
• version/ivanti connect secure/9.1-r1
• version/ivanti connect secure/9.1-r1.0
• version/ivanti connect secure/9.1-r10
• version/ivanti connect secure/9.1-r10.0
• version/ivanti connect secure/9.1-r10.2
• version/ivanti connect secure/9.1-r11
• version/ivanti connect secure/9.1-r11.0
• version/ivanti connect secure/9.1-r11.1
• version/ivanti connect secure/9.1-r11.3
• version/ivanti connect secure/9.1-r11.4
• version/ivanti connect secure/9.1-r11.5
• version/ivanti connect secure/9.1-r12
• version/ivanti connect secure/9.1-r12.1
• version/ivanti connect secure/9.1-r12.2
• version/ivanti connect secure/9.1-r13
• version/ivanti connect secure/9.1-r13.1
• version/ivanti connect secure/9.1-r14
• version/ivanti connect secure/9.1-r14.4
• version/ivanti connect secure/9.1-r15
• version/ivanti connect secure/9.1-r15.2
• version/ivanti connect secure/9.1-r16
• version/ivanti connect secure/9.1-r16.1
• version/ivanti connect secure/9.1-r17
• version/ivanti connect secure/9.1-r17.1
• version/ivanti connect secure/9.1-r17.2
• version/ivanti connect secure/9.1-r18
• version/ivanti connect secure/9.1-r18.1
• version/ivanti connect secure/9.1-r18.2
• version/ivanti connect secure/9.1-r18.3
• version/ivanti connect secure/9.1-r18.7
• version/ivanti connect secure/9.1-r18.8
• version/ivanti connect secure/9.1-r2
• version/ivanti connect secure/9.1-r2.0
• version/ivanti connect secure/9.1-r3
• version/ivanti connect secure/9.1-r3.0
• version/ivanti connect secure/9.1-r4
• version/ivanti connect secure/9.1-r4.0
• version/ivanti connect secure/9.1-r4.1
• version/ivanti connect secure/9.1-r4.2
• version/ivanti connect secure/9.1-r4.3
• version/ivanti connect secure/9.1-r5
• version/ivanti connect secure/9.1-r5.0
• version/ivanti connect secure/9.1-r6
• version/ivanti connect secure/9.1-r6.0
• version/ivanti connect secure/9.1-r7
• version/ivanti connect secure/9.1-r7.0
• version/ivanti connect secure/9.1-r8
• version/ivanti connect secure/9.1-r8.0
• version/ivanti connect secure/9.1-r8.1
• version/ivanti connect secure/9.1-r8.2
• version/ivanti connect secure/9.1-r8.4
• version/ivanti connect secure/9.1-r9
• version/ivanti connect secure/9.1-r9.0
• version/ivanti connect secure/9.1-r9.1
• version/ivanti connect secure/9.1-r9.2
• version/ivanti connect secure/22.7
• version/ivanti connect secure/22.7-r1
• version/ivanti connect secure/22.7-r1.1
• version/ivanti connect secure/22.7-r1.2
• version/ivanti connect secure/22.7-r1.3
• version/ivanti connect secure/22.7-r1.4
• version/ivanti connect secure/22.7-r1.5
• version/ivanti connect secure/22.7-r2
• version/ivanti connect secure/22.7-r2.1
• version/ivanti connect secure/22.7-r2.2
• canonical/ivanti policy secure
• version/ivanti policy secure/22.7
• version/ivanti policy secure/22.7-r1
• version/ivanti policy secure/22.7-r1.1