Ivanti Endpoint Manager Out-of-Bounds Write Vulnerability Leading to Denial-of-Service

A denial-of-service vulnerability has been identified in Ivanti Endpoint Manager (EPM) versions prior to the January 2025 Security Update for both the 2024 release and the 2022 SU6 release. The vulnerability arises from an out-of-bounds write, which allows a remote unauthenticated attacker to disrupt service.

Impact

Exploitation of this vulnerability causes a denial-of-service condition, disrupting normal application functionality.

Remediation

Users can apply the January 2025 Security Update Hot Patch, available through the Ivanti License System (ILS), to address this vulnerability. After applying the patch, it's recommended to run the AgentEngineHashUpdate.exe tool to update hash values in the database.