PT-2023-6740 · Citrix · Citrix Netscaler Adc +1

🗓️ 10 Oct 2023 00:00:00Reported by Positive TechnologiesType

Denial of Service in Citrix NetScaler ADC and NetScaler Gateway caused by a buffer overread in snprintf, risking service disruption.

Reporter	Title	Published	Views	Family All 18
ICS	#StopRansomware: LockBit 3.0 Ransomware Affiliates Exploit CVE 2023-4966 Citrix Bleed Vulnerability	21 Nov 202312:00	–	ics
BDU FSTEC	The vulnerability of Citrix ADC application delivery controllers (formerly known as Citrix NetScaler Application Delivery Controller) and Citrix Gateway virtual environment access control systems (formerly known as Citrix NetScaler Gateway) relates to an operation that goes beyond the buffer in memory, allowing a malicious actor to cause service failures.	8 Nov 202300:00	–	bdu_fstec
Circl	CVE-2023-4967	11 Oct 202310:17	–	circl
CISA	Citrix Releases Security Updates for Multiple Products	10 Oct 202312:00	–	cisa
Tenable Nessus	NetScaler ADC and NetScaler Gateway Multiple Vulnerabilities (CTX579459)	13 Oct 202300:00	–	nessus
CNNVD	Citrix ADC and NetScaler Gateway Security Vulnerabilities	27 Oct 202300:00	–	cnnvd
Citrix	NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2023-4966 and CVE-2023-4967	10 Oct 202308:07	–	citrix
Citrix	Netscaler CVE & Security Guide	14 Jul 202400:00	–	citrix
CVE	CVE-2023-4967	27 Oct 202318:01	–	cve
Cvelist	CVE-2023-4967 Denial of service	27 Oct 202318:01	–	cvelist

Source	Link
bdu	www.bdu.fstec.ru/vul/2023-07517
safe-surf	www.safe-surf.ru/specialists/bulletins-nkcki/700789
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-4967
support	www.support.citrix.com/article/CTX579459
t	www.t.me/latest_high_impact_cve/16
twitter	www.twitter.com/Coburger/status/1733226051285721499
t	www.t.me/cvenotify/60105
twitter	www.twitter.com/bluepatch0404/status/1788200587164819942
t	www.t.me/netlas/112
twitter	www.twitter.com/VDIHacker/status/1716529745456771558

08 May 2024 00:00Current

9.4High risk

Vulners AI Score9.4

CVSS 28.5

CVSS 3.17.5 - 8.2

EPSS0.00878

SSVC