CVE-2024-8534
Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appliance must be configured as a Gateway (VPN Vserver) with RDP Feature enabled OR the appliance must be configured as a Gateway (VPN Vserver) and RDP Proxy Server Profile is created and set to Gateway (VPN Vserver) OR the appliance must be configured as a Auth Server (AAA Vserver) with RDP Feature enabled
- Score
- CVSS 4.0 8.4 High
- Status
- Analyzed - secure@citrix.com
- Published
- 2024-11-12
- Last modified
- 2024-11-21
- Weaknesses
- CWE-119, CWE-787
Affected products
- Netscaler Application Delivery Controller (Citrix)
- Netscaler Gateway (Citrix)
- Adc (Netscaler)
- Gateway (Netscaler)
- Netscaler-adc 12.1-fips (Netscaler)
- Netscaler-adc 12.1-ndcpp (Netscaler)
- Netscaler-adc 13.1-fips (Netscaler)
- Netscaler Gateway (Netscaler)
- Netscaler Adc (Netsclaer)
References
- https://support.citrix.com/s/article/CTX691608-netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20248534-an…
