The vulnerability of Citrix ADC application delivery controllers (formerly known as Citrix NetScaler Application Delivery Controller) and Citrix Gateway access control systems (formerly known as Citrix NetScaler Gateway) relates to operations that go beyond buffer boundaries in memory. This allows attackers to influence the confidentiality, integrity, and accessibility of protected information.

🗓️ 11 Oct 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

Citrix delivery controllers and Gateway memory overflow risks affect confidentiality and integrity.

Reporter	Title	Published	Views	Family All 67
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Netscaler_Application_Delivery_Controller	25 Oct 202312:37	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Read in Citrix Netscaler_Application_Delivery_Controller	5 Jul 202523:56	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Netscaler_Application_Delivery_Controller	29 Oct 202315:31	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Read in Citrix Netscaler_Application_Delivery_Controller	8 Jul 202514:12	–	githubexploit
GithubExploit	cve-deep-dives	16 Apr 202615:59	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Netscaler_Application_Delivery_Controller	25 Oct 202307:17	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Netscaler_Application_Delivery_Controller	27 Jan 202611:29	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Netscaler_Application_Delivery_Controller	25 Oct 202307:17	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Netscaler_Application_Delivery_Controller	29 Oct 202315:31	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Read in Citrix Netscaler_Application_Delivery_Controller	30 Jun 202511:02	–	githubexploit

Vulners

Node

OR

citrix_systems citrix_adcRange14–14.1-8.50

citrix_systems citrix_adcRange13.1–13.1-49.15

citrix_systems citrix_adcRange13.0–13.0-92.19

citrix_systems citrix_gatewayRange14–14.1-8.50

citrix_systems citrix_gatewayRange13.1–13.1-49.15

citrix_systems citrix_gatewayRange13.0–13.0-92.19

Source	Link
support	www.support.citrix.com/article/CTX579459/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20234966-and-cve20234967
cisa	www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
web	www.web.nvd.nist.gov/view/vuln/detail

24 Sep 2024 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 39.4

CVSS 29.7

EPSS0.99999

Citrixapplication delivery Citrix Gateway buffer overflow confidentiality integrity availability