description: A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x
22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack or in certain conditions read contents from memory.
affected:
{
defaultStatus: unaffected
vendor: Ivanti
product: Connect Secure
versions:
version: 22.1R6.2, status: affected, lessThan: 22.1R6.2, versionType: semver
version: 22.2R4.2, status: affected, lessThan: 22.2R4.2, versionType: semver
version: 22.3R1.2, status: affected, lessThan: 22.3R1.2, versionType: semver
version: 22.4R1.2, status: affected, lessThan: 22.4R1.2, versionType: semver
version: 22.4R2.4, status: affected, lessThan: 22.4R2.4, versionType: semver
version: 22.5R1.3, status: affected, lessThan: 22.5R1.3, versionType: semver
version: 22.5R2.4, status: affected, lessThan: 22.5R2.4, versionType: semver
version: 22.6R2.3, status: affected, lessThan: 22.6R2.3, versionType: semver
version: 9.1R14.6, status: affected, lessThan: 9.1R14.6, versionType: semver
version: 9.1R15.4, status: affected, lessThan: 9.1R15.4, versionType: semver
version: 9.1R16.4, status: affected, lessThan: 9.1R16.4, versionType: semver
version: 9.1R17.4, status: affected, lessThan: 9.1R17.4, versionType: semver
version: 9.1R18.5, status: affected, lessThan: 9.1R18.5, versionType: semver
}
{
defaultStatus: unaffected
vendor: Ivanti
product: Policy Secure
versions:
version: 22.4R1.2, status: affected, lessThan: 22.4R1.2, versionType: semver
version: 22.5R1.3, status: affected, lessThan: 22.5R1.3, versionType: semver
version: 22.6R1.2, status: affected, lessThan: 22.6R1.2, versionType: semver
version: 9.1R16.4, status: affected, lessThan: 9.1R16.4, versionType: semver
version: 9.1R17.4, status: affected, lessThan: 9.1R17.4, versionType: semver
version: 9.1R18.5, status: affected, lessThan: 9.1R18.5, versionType: semver
}
metrics:
cvssV3_0: [
version: 3.0
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
baseScore: 8.2
baseSeverity: HIGH
]