CVE-2024-50319

Summary

CVE-2024-50319 is a newly disclosed vulnerability affecting Ivanti Avalanche prior to version 6.4.6. An attacker can exploit this issue through remote means to trigger an infinite loop, resulting in a denial of service (DoS) condition. This vulnerability could potentially impact the availability and functionality of impacted Ivanti Avalanche instances. Ivanti urges users to promptly update their software to mitigate this risk. The infinite loop, unchecked in the affected software, allows an attacker to cause significant disruption without requiring authentication.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.