CVE-2024-8534 — Memory safety vulnerability leading to memory corruption and Denial of Service

Description (CNA)

Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appliance must be configured as a Gateway (VPN Vserver) with RDP Feature enabled OR the appliance must be configured as a Gateway (VPN Vserver) and RDP Proxy Server Profile is created and set to Gateway (VPN Vserver) OR the appliance must be configured as a Auth Server (AAA Vserver) with RDP Feature enabled

Affected (CNA)

Vendor / product	Versions
NetSclaer / NetScaler ADC	affected 14.1 before 29.72; affected 13.1 before 55.34; affected 13.1-FIPS before 37.207; affected 12.1-FIPS before 55.321; affected 12.1-NDcPP before 55.321
NetScaler / NetScaler Gateway	affected 14.1 before 29.72; affected 13.1 before 55.34; affected 13.1-FIPS before 37.207; affected 12.1-FIPS before 55.321; affected 12.1-NDcPP before 55.321

CWE

CWE-119

References

https://support.citrix.com/s/article/CTX691608-netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20248534-and-cve20248535?language=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.