©2026 Cisco and/or its affiliates. Snort, the Snort and Pig logo are registered trademarks of Cisco. All rights reserved.
SERVER-OTHER -- Snort has detected traffic exploiting vulnerabilities in a server in the network.
SERVER-OTHER Ivanti Avalance WLInfoRailService denial of service attempt
This rule looks for an InfoRail protocol header that includes a payform indicator and a distlist indicator, followed by a payload composed solely of space characters. Successful exploitation results in the service crashing, leading to a denial-of-service condition.
This rule fires on attempts to cause a denial-of-service condition in Ivanti Avalanche WLInfoRailService.
Public information/Proof of Concept available
No known false positives
Cisco Talos Intelligence Group
Rule Categories::Server::Other
MITRE::ATT&CK Framework::Enterprise::Impact::Endpoint Denial of Service::Application or System Exploitation
Vulnerability::Severity::High
Vulnerability::Severity::Critical
Denial of Service
Denial of Service attacks aim to make a server or program unresponsive for users. These attacks may be volume-based, to overwhelm the system, or they may use certain logical flaws in the software to cut the service off from the users. The attack may come from one or multiple sources. These attacks do not usually lead to a remote code execution. Volume based attacks are best handled using a firewall application.
CVE-2024-36136 |
Loading description
|
©2026 Cisco and/or its affiliates. Snort, the Snort and Pig logo are registered trademarks of Cisco. All rights reserved.