A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to create a buffer overflow that could result in service disruption or arbitrary code execution.
References
| Link | Resource |
|---|---|
| https://forums.ivanti.com/s/article/Security-Advisory-Avalanche-CVE-2023-38036 | Vendor Advisory |
Configurations
History
17 Jul 2025, 13:45
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://forums.ivanti.com/s/article/Security-Advisory-Avalanche-CVE-2023-38036 - Vendor Advisory | |
| CPE | cpe:2.3:a:ivanti:avalanche:*:*:*:*:*:*:*:* | |
| First Time |
Ivanti avalanche
Ivanti |
15 Jul 2025, 13:14
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-12 04:15
Updated : 2025-07-17 13:45
NVD link : CVE-2023-38036
Mitre link : CVE-2023-38036
CVE.ORG link : CVE-2023-38036
JSON object : View
Products Affected
ivanti
- avalanche
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')