PT-2024-1102 · Citrix · Citrix Netscaler Gateway+1

Published

2024-01-16

·

Updated

2025-07-02

·

CVE-2023-6549

CVSS v2.0

8.5

High

VectorAV:N/AC:L/Au:N/C:N/I:P/A:C
Name of the Vulnerable Software and Affected Versions Citrix NetScaler ADC and NetScaler Gateway (affected versions not specified)
Description The issue is related to an improper restriction of operations within the bounds of a memory buffer in Citrix NetScaler ADC and NetScaler Gateway, which can lead to a buffer overflow. This can allow a remote attacker to cause a denial of service and potentially perform an out-of-bounds memory read. The vulnerability has been exploited in the wild.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Code Injection

Buffer Overflow

Weakness Enumeration

CWE-94CWE-119

Related Identifiers

BDU:2024-00383
CVE-2023-6549

Affected Products

Citrix Netscaler Adc
Citrix Netscaler Gateway