8.4Yüksek

CVE-2024-8534Memory safety vulnerability leading to memory corruption and Denial of Service

NetSclaer NetScaler ADC; NetScaler NetScaler Gateway; netscaler adc; netscaler gateway Yayım: (2 yıl önce)

Açıklama

Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appliance must be configured as a Gateway (VPN Vserver) with RDP Feature enabled OR the appliance must be configured as a Gateway (VPN Vserver) and RDP Proxy Server Profile is created and set to Gateway (VPN Vserver) OR the appliance must be configured as a Auth Server (AAA Vserver) with RDP Feature enabled

Zayıflık türü (CWE): CWE-119

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
netscaler adc 14.1 – < 14.1-29.72
netscaler gateway 14.1 – < 14.1-29.72
netscaler netscaler-adc_12.1-fips 12.1 – < 12.1-55.321
netscaler netscaler-adc_12.1-ndcpp 12.1 – < 12.1-55.321
netscaler netscaler-adc_13.1-fips 13.1 – < 13.1-37.207
NetScaler NetScaler Gateway 14.1 – < 29.72, 13.1 – < 55.34, 13.1-FIPS – < 37.207, 12.1-FIPS – < 55.321, 12.1-NDcPP – < 55.321
NetSclaer NetScaler ADC 14.1 – < 29.72, 13.1 – < 55.34, 13.1-FIPS – < 37.207, 12.1-FIPS – < 55.321, 12.1-NDcPP – < 55.321

Kaynaklar ve yamalar