Vulnerability · Published Nov 12, 2024 · Assigned by Citrix
CVE-2024-8534Memory safety vulnerability leading to memory corruption and Denial of Service
High 8.4
In plain English
A high-severity memory corruption in NetScaler Gateway from NetScaler. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 47% of all known vulnerabilities).
Official description
Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appliance must be configured as a Gateway (VPN Vserver) with RDP Feature enabled OR the appliance must be configured as a Gateway (VPN Vserver) and RDP Proxy Server Profile is created and set to Gateway (VPN Vserver) OR the appliance must be configured as a Auth Server (AAA Vserver) with RDP Feature enabled
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| NetSclaer | NetScaler ADC | 14.1 – before 29.7213.1 – before 55.3413.1-FIPS – before 37.20712.1-FIPS – before 55.32112.1-NDcPP – before 55.321 |
| NetScaler | NetScaler Gateway | 14.1 – before 29.7213.1 – before 55.3413.1-FIPS – before 37.20712.1-FIPS – before 55.32112.1-NDcPP – before 55.321 |
Weakness: CWE-119 · Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:L