Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2024-8534

Memory safety vulnerability leading to memory corruption and Denial of Service

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Citrix

Description

Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appliance must be configured as a Gateway (VPN Vserver) with RDP Feature enabled OR the appliance must be configured as a Gateway (VPN Vserver) and RDP Proxy Server Profile is created and set to Gateway (VPN Vserver) OR the appliance must be configured as a Auth Server (AAA Vserver) with RDP Feature enabled

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NetSclaer NetScaler ADC

Default version status: unaffected

  • 14.1 to < 29.72affected
  • 13.1 to < 55.34affected
  • 13.1-FIPS to < 37.207affected
  • 12.1-FIPS to < 55.321affected
  • 12.1-NDcPP to < 55.321affected

NetScaler NetScaler Gateway

Default version status: unaffected

  • 14.1 to < 29.72affected
  • 13.1 to < 55.34affected
  • 13.1-FIPS to < 37.207affected
  • 12.1-FIPS to < 55.321affected
  • 12.1-NDcPP to < 55.321affected

References