8.2High

CVE-2023-4967Denial of service

Cloud Software Group NetScaler ADC; Cloud Software Group NetScaler Gateway Published: 2023-10-27 21:01 (3 years ago)

Description

Denial of Service in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA Virtual Server

Weakness (CWE): CWE-119

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

Vendor	Product	Versions
Cloud Software Group	NetScaler ADC	14.1 – < 8.50, 13.1 – < 49.15, 13.0 – < 92.19, 13.1-FIPS – < 37.164, 12.1-FIPS – < 55.300, 12.1-NDcPP – < 55.300
Cloud Software Group	NetScaler Gateway	14.1 – < 8.50, 13.1 – < 49.15, 13.0 – < 92.19

References and patches

https://support.citrix.com/article/CTX579459/

CVSS score

8.2High

Source: Citrix · CVSS 3.1

Attack vector: Network
Attack complexity: Low
Privileges required: None
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: Low
Availability: High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

EPSS (chance of exploitation in 30 days)

1.03%

higher than 64% of all CVEs

CISA assessment (SSVC)

Exploitation: none
Automatable: yes
Technical impact: partial

Timeline

ID reserved2023-09-14
Published2023-10-27 21:01
Reached IP-DB2026-10-24 23:53
Last updated2025-02-27 23:39

Assigned by (CNA): Citrix

View at source: CVE.org · NVD

Get told when these products get a new vulnerability

Turn on email alerts

Free · with an account · switch off any time

Description

Affected products and versions

References and patches

Recent CVEs in the same product — Citrix NetScaler ADC / Gateway

Memory overflow in SSL/TLS/DTLS can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway

Memory overflow / improper handling in BGP dynamic routing can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway

Memory overflow in HTTP/3 (QUIC) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway

Memory overflow in ICA proxy can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway

Memory overflow in the management plane can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway

Memory overflow in SIP ALG (LSN) and DNS answer-section logging datapaths can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler