Citrix flaws threaten NetScaler services and access
Citrix patched 14 vulnerabilities across Secure Access Client for Windows, NetScaler ADC, NetScaler Gateway and NetScaler Console, including remotely exploitable denial-of-service flaws and a Console authentication bypass.
Several NetScaler flaws involve memory overflows or corruption in packet processing and configured features, which can make an appliance behave unpredictably or stop responding. One packet-processing flaw affects all ADC and Gateway deployments; other remote flaws depend on services such as DNS, VPN or authentication being configured. The Console flaw can expose restricted resources by bypassing authentication.
For organizations relying on NetScaler for load balancing, DNS, VPN or authentication, a remotely triggered outage can interrupt those services without an attacker taking over the appliance. Exposure varies with the products and features in use, so the advisory does not describe a uniform risk across every Citrix deployment.
4 sources · Nov 12
CVEs in this update
14 CVEs
Across apitable, ADC, Gateway, and related packages.
Citrix ha rilasciato aggiornamenti di sicurezza per risolvere molteplici vulnerabilità, di cui 10 con gravità "critica" e 15 con gravità "alta", presenti nei prodotti NetScaler ADC, NetScaler Gateway, NetScaler Console, Secure Access Client e App Layering.