CVE-2024-36136

HIGH

Ivanti Avalanche <6.3.1 - DoS

Title source: llm

An off-by-one error in WLInfoRailService in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to crash the service, resulting in a DoS.

CVSS v3 7.5

EPSS 0.0801

EPSS Percentile 92.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-193

Status published

ivanti/avalanche

... and 5 more

Published Aug 14, 2024

Tracked Since Feb 18, 2026