Home Ivanti CVE-2024-50317
Back to Ivanti

CVE-2024-50317

Ivanti Avalanche - Core Service

Ivanti CVSS 7.5 Updated March 16, 2026

Executive Risk Summary

"A null pointer dereference vulnerability in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service, potentially disrupting business operations. To mitigate this risk, it is essential to apply the latest security patch to ensure the integrity and availability of the affected system."

Operational Audit Arsenal

Target Type Service
Target Asset Avalanche Service
Standard Path /opt/ivanti/avalanche

Manual Verification Required

This is a non-Windows asset (Ivanti). Use the target asset details and official path provided above to verify your current version against the official vendor advisories listed below.

Patch Impact Forecast

Reboot Required Likely

Moderate

Internal Work Notes

Apply Ivanti Avalanche security patch to version 6.4.6 or later to prevent remote denial of service attacks.

Technical Intelligence & Operational Utilities • Delivered Weekly

Intelligence Sources

Related Ivanti Threats

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.