356 matches found
CISA Releases Guidance for Addressing Citrix NetScaler ADC and Gateway Vulnerability CVE-2023-4966, Citrix Bleed
Today, CISA, in response to active, targeted exploitation, released guidance for addressing Citrix NetScaler ADC and Gateway vulnerability CVE-2023-4966. The vulnerability, also known as Citrix Bleed, could allow a cyber actor to take control of an affected system. CISA recommends organizations...
CVE-2023-4967
Denial of Service in NetScaler ADC and NetScaler Gateway when configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA Virtual Server...
Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller
Exploit Repository Stack-Overflow on Citrix CVE-2023-3519...
CVE-2023-4967 Denial of service
Denial of Service in NetScaler ADC and NetScaler Gateway when configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA Virtual Server...
CVE-2023-4967
NetScaler ADC and NetScaler Gateway are affected by a buffer-related vulnerability (CVE-2023-4967 ) that can lead to a Denial of Service (DoS) . The issue occurs when these appliances are configured as a Gateway (supporting VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or as an AAA Virtual Serv...
CVE-2023-4967: Improper Restriction of Operations within the Bounds of a Memory Buffer
Denial of Service in NetScaler ADC and NetScaler Gateway when configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA Virtual Server...
Alert: PoC Exploits Released for Citrix and VMware Vulnerabilities
Virtualization services provider VMware has alerted customers to the existence of a proof-of-concept PoC exploit for a recently patched security flaw in Aria Operations for Logs. Tracked as CVE-2023-34051 CVSS score: 8.1, the high-severity vulnerability relates to a case of authentication bypass...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Netscaler_Application_Delivery_Controller
CVE-2023-4966 Citrix Memory Leak Exploit 🔒 Leak session token...
VulnCheck KEV: CVE-2023-4966
Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive information disclosure when configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA virtual server...
NetScaler ADC and NetScaler Gateway Multiple Vulnerabilities (CTX579459)
The remote NetScaler ADC formerly Citrix ADC or NetScaler Gateway formerly Citrix Gateway device is version 12.1, 12.1-FIPS before 12.1-55.300-FIPS, 13.0 before 13.0-92.19, 13.1 before 13.1-49.15, 13.1-FIPS before 13.1-37.164-FIPS, or 14.1 before 14.1.8.50. It is therefore affected by multiple...
Vulnerabilities fixed in NetScaler ADC and NetScaler Gateway
Citrix has fixed vulnerabilities in NetScaler ADC and NetScaler Gateway. A malicious party could exploit the vulnerabilities to obtain sensitive information or cause a denial-of-service attack. Citrix has released updates to fix the vulnerabilities. For more information, see:...
CVE-2023-4966
Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA virtual server...
CVE-2023-4966 Unauthenticated sensitive information disclosure
Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA virtual server...
CVE-2023-4966
CVE-2023-4966 affects Citrix NetScaler ADC and NetScaler Gateway when configured as a Gateway or AAA virtual server. The issue stems from improper usage of snprintf/memory handling in the WebProc/auth pathways, causing memory disclosure via crafted responses and exposing sensitive data (e.g., aut...
CVE-2023-4966 Unauthenticated sensitive information disclosure
Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA virtual server...
Citrix Releases Security Updates for Multiple Products
Citrix has released security updates to address vulnerabilities affecting multiple products. A malicious cyber actor can exploit one of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Citrix security bulletins and apply...
CVE-2023-4966
Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA virtual server. Recent assessments: rbowes-r7 at October 24, 2023 6:01pm UTC reported: On October 10, 2023, Citrix posted an advisory about a...
PT-2023-6740
Name of the Vulnerable Software and Affected Versions Citrix NetScaler ADC and NetScaler Gateway affected versions not specified Description The issue is related to a Denial of Service condition in Citrix NetScaler ADC and NetScaler Gateway when configured as a Gateway or AAA Virtual Server. This...
CVE-2023-4966: Improper Restriction of Operations within the Bounds of a Memory Buffer
Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA virtual server...