CVE-2024-8534
EUVD-2024-4954912.11.2024, 19:15
Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appliance must be configured as a Gateway (VPN Vserver) with RDP Feature enabled OR the appliance must be configured as a Gateway (VPN Vserver) and RDP Proxy Server Profile is created and set to Gateway (VPN Vserver) OR the appliance must be configured as a Auth Server (AAA Vserver) with RDP Feature enabledEnginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| citrix | netscaler_application_delivery_controller | 12.1 ≤ 𝑥 < 12.1-55.321 |
| citrix | netscaler_application_delivery_controller | 12.1 ≤ 𝑥 < 12.1-55.321 |
| citrix | netscaler_application_delivery_controller | 12.1 ≤ 𝑥 < 13.1-55.34 |
| citrix | netscaler_application_delivery_controller | 13.1 ≤ 𝑥 < 13.1-37.207 |
| citrix | netscaler_application_delivery_controller | 14.1 ≤ 𝑥 < 14.1-29.72 |
| citrix | netscaler_gateway | 12.1 ≤ 𝑥 < 13.1-55.34 |
| citrix | netscaler_gateway | 14.1 ≤ 𝑥 < 14.1-29.72 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| netscaler | adc | 14.1 ≤ 𝑥 < 14.1-29.72 | ADP |
| netscaler | gateway | 14.1 ≤ 𝑥 < 14.1-29.72 | ADP |
| netscaler | adc | 13.1 ≤ 𝑥 < 13.1-55.34 | ADP |
| netscaler | netscaler-adc_13.1-fips | 13.1 ≤ 𝑥 < 13.1-37.207 | ADP |
| netscaler | netscaler-adc_12.1-fips | 12.1 ≤ 𝑥 < 12.1-55.321 | ADP |
| netscaler | netscaler-adc_12.1-ndcpp | 12.1 ≤ 𝑥 < 12.1-55.321 | ADP |
Common Weakness Enumeration
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory BufferThe software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.
- CWE-787 - Out-of-bounds WriteThe software writes data past the end, or before the beginning, of the intended buffer.