EXPLOIT Ivanti Avalanche WLAvalancheService.exe TV_FC Infinite Loop (CVE-2024-50320)

Rule ID

1235981

Severity

High

Description

A denial of service vulnerability has been reported in Ivanti Avalanche. This vulnerability is due to an infinite loop when handling TV_FC InfoRail headers in the WLAvalancheService.exe component.

Impact

Denial of service

Recommendation

Update vendor's patch.

IPS Category

DoS attacks

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

N/A