Read the docs

Pulse Secure

Records94All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high47CVSS 7.0–8.9

Exploited now

Pulse Secure records in CISA KEV
TI-2020-06636 Pulse Connect Secure Code Injection Vulnerability Priority CRITICAL 91KEV 2022-03-07TI-2019-08621 Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability Priority CRITICAL 91KEV 2021-11-03TI-2021-05761 Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability Priority CRITICAL 91KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Pulse Connect Secure 57 records CRITICAL Pulse Policy Secure 31 records CRITICAL Pulse Secure Desktop Client 18 records HIGH Pulse Secure Desktop 3 records LOW Virtual Traffic Manager 3 records LOW Client 2 records HIGH Pulse Secure Virtual Application Delivery Controller 2 records HIGH Steel Belted Radius 2 records HIGH

Records

2 records in Pulse Secure Virtual Application Delivery Controller · all components

TI-2019-08569 CVE-2019-11477 · GHSA-748j-px2m-cwgh

Integer overflow in TCP_SKB_CB(skb)->tcp_gso_segs

Priority HIGH 78

Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.98745 Published 2019-06-18 Fixed in 4.4.182, 4.9.182 +3 CWE-190
TI-2019-08570 CVE-2019-11478 · GHSA-xh2h-cw6h-x9h5

SACK can cause extensive memory use via fragmented resend queue

Priority HIGH 77

Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.94414 Published 2019-06-18 Partial fix · 4.4.182, 4.9.182 +3 CWE-770
Open these records in search →