ID
VAR-202401-1629
CVE
CVE-2023-6549
TITLE
of Citrix Systems netscaler application delivery controller and netscaler gateway Buffer error vulnerability in
Trust: 0.8
DESCRIPTION
Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory Read . of Citrix Systems netscaler application delivery controller and netscaler gateway Exists in a buffer error vulnerability.Service operation interruption (DoS) It may be in a state. NetScaler Gateway is an access gateway with an SSL VPN solution that provides single sign-on and authentication for remote end users of network assets. NetScaler ADC is an application delivery controller. Both are products of Citrix. Citrix NetScaler ADC and Gateway have a denial of service vulnerability. The vulnerability is due to not restricting memory operations within the boundary range. Attackers can exploit this vulnerability to launch a denial of service vulnerability
Trust: 2.16
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | citrix | model: | netscaler gateway | scope: | lt | version: | 13.1-51.15 | Trust: 1.0 |
| vendor: | citrix | model: | netscaler application delivery controller | scope: | lt | version: | 12.1-55.302 | Trust: 1.0 |
| vendor: | citrix | model: | netscaler gateway | scope: | lt | version: | 14.1-12.35 | Trust: 1.0 |
| vendor: | citrix | model: | netscaler application delivery controller | scope: | lt | version: | 14.1-12.35 | Trust: 1.0 |
| vendor: | citrix | model: | netscaler gateway | scope: | gte | version: | 14.1 | Trust: 1.0 |
| vendor: | citrix | model: | netscaler application delivery controller | scope: | gte | version: | 14.1 | Trust: 1.0 |
| vendor: | citrix | model: | netscaler application delivery controller | scope: | lt | version: | 13.0-92.21 | Trust: 1.0 |
| vendor: | citrix | model: | netscaler gateway | scope: | gte | version: | 13.0 | Trust: 1.0 |
| vendor: | citrix | model: | netscaler gateway | scope: | gte | version: | 13.1 | Trust: 1.0 |
| vendor: | citrix | model: | netscaler application delivery controller | scope: | gte | version: | 12.1 | Trust: 1.0 |
| vendor: | citrix | model: | netscaler application delivery controller | scope: | gte | version: | 13.0 | Trust: 1.0 |
| vendor: | citrix | model: | netscaler application delivery controller | scope: | lt | version: | 13.1-51.15 | Trust: 1.0 |
| vendor: | citrix | model: | netscaler application delivery controller | scope: | gte | version: | 13.1 | Trust: 1.0 |
| vendor: | citrix | model: | netscaler gateway | scope: | lt | version: | 13.0-92.21 | Trust: 1.0 |
| vendor: | citrix | model: | netscaler application delivery controller | scope: | lt | version: | 13.1-37.176 | Trust: 1.0 |
| vendor: | シトリックス システムズ | model: | netscaler gateway | scope: | - | version: | - | Trust: 0.8 |
| vendor: | シトリックス システムズ | model: | netscaler application delivery controller | scope: | - | version: | - | Trust: 0.8 |
| vendor: | citrix | model: | netscaler gateway | scope: | gte | version: | 13.0,<13.0-92.21 | Trust: 0.6 |
| vendor: | citrix | model: | netscaler gateway | scope: | gte | version: | 13.1,<13.1-51.15 | Trust: 0.6 |
| vendor: | citrix | model: | netscaler gateway | scope: | gte | version: | 14.1,<14.1-12.35 | Trust: 0.6 |
| vendor: | citrix | model: | netscaler application delivery controller | scope: | gte | version: | 12.1,<12.1-55.302 | Trust: 0.6 |
| vendor: | citrix | model: | netscaler application delivery controller | scope: | gte | version: | 13.1,<13.1-37.176 | Trust: 0.6 |
| vendor: | citrix | model: | netscaler application delivery controller | scope: | gte | version: | 13.0,<13.0-92.21 | Trust: 0.6 |
| vendor: | citrix | model: | netscaler application delivery controller | scope: | gte | version: | 13.1,<13.1-51.15 | Trust: 0.6 |
| vendor: | citrix | model: | netscaler application delivery controller | scope: | gte | version: | 14.1,<14.1-12.35 | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-119 | Trust: 1.0 |
| problemtype: | Buffer error (CWE-119) [NVD evaluation ] | Trust: 0.8 |
PATCH
| title: | Patch for Citrix NetScaler ADC and Gateway Denial of Service Vulnerability | url: | https://www.cnvd.org.cn/patchInfo/show/541106 | Trust: 0.6 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2023-6549 | Trust: 3.2 |
| db: | JVNDB | id: | JVNDB-2023-025480 | Trust: 0.8 |
| db: | CNVD | id: | CNVD-2024-17821 | Trust: 0.6 |
REFERENCES
| url: | https://support.citrix.com/article/ctx584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549 | Trust: 1.8 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2023-6549 | Trust: 1.4 |
| url: | https://www.cisa.gov/known-exploited-vulnerabilities-catalog | Trust: 0.8 |
SOURCES
| db: | CNVD | id: | CNVD-2024-17821 |
| db: | JVNDB | id: | JVNDB-2023-025480 |
| db: | NVD | id: | CVE-2023-6549 |
LAST UPDATE DATE
2024-08-14T15:10:22.289000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2024-17821 | date: | 2024-04-12T00:00:00 |
| db: | JVNDB | id: | JVNDB-2023-025480 | date: | 2024-02-05T06:37:00 |
| db: | NVD | id: | CVE-2023-6549 | date: | 2024-06-10T16:27:52.507 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2024-17821 | date: | 2024-04-12T00:00:00 |
| db: | JVNDB | id: | JVNDB-2023-025480 | date: | 2024-02-05T00:00:00 |
| db: | NVD | id: | CVE-2023-6549 | date: | 2024-01-17T21:15:11.690 |