CVE-2017-7219
🗓️ 13 Apr 2017 14:00:00Reported by mitreType 
cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 100 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 13 |
|---|---|---|---|---|
 | NetScaler Gateway Command Execution | 18 May 201700:00 | – | bdu_fstec |
 | Citrix NetScaler Gateway Heap Buffer Overflow Vulnerability | 24 May 201700:00 | – | cnvd |
 | CVE-2017-7219 - Heap Overflow Vulnerability in Citrix NetScaler Gateway Could Result in Arbitrary Code Execution | 12 Apr 201704:00 | – | citrix |
 | CVE-2017-7219 | 13 Apr 201714:00 | – | cvelist |
 | EUVD-2017-16254 | 7 Oct 202500:30 | – | euvd |
 | CVE-2017-7219 | 13 Apr 201714:59 | – | nvd |
 | Citrix NetScaler Gateway Heap Overflow Vulnerability (CTX222657) | 17 May 201700:00 | – | openvas |
 | CVE-2017-7219 | 13 Apr 201714:59 | – | osv_cve |
 | Heap overflow | 13 Apr 201714:59 | – | prion |
 | PT-2017-2028 | 13 Apr 201700:00 | – | ptsecurity |
10
Node
AND
OR
| Source | Link |
|---|---|
| support | www.support.citrix.com/article/CTX222657 |
| securitytracker | www.securitytracker.com/id/1038283 |
| securityfocus | www.securityfocus.com/bid/97626 |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| host | path | /cvpn/fs/ping | A heap overflow vulnerability in the ping functionality allows an authenticated VPN user to trigger a use-after-free condition. The 'host' parameter is used in an unbounded strcpy, allowing an attacker to overwrite a pointer to a parameter list on the heap. | CWE-119 |
| password | request body | /cvpn/smb_login | Part of a two-step exploit chain. By providing a password between 16 and 32 characters, an attacker can force malloc to return a previously freed memory address (from the ping request overflow), allowing them to overwrite a function pointer with the address of shellcode stored on the stack. | CWE-119 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 01:23Current
8.4High risk
Vulners AI Score8.4
CVSS 38.8
CVSS 29
EPSS0.04856