Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-33mv-fjxj-2mx6

Опубликовано: 12 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 8.4
CVSS3: 5.3

Описание

Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appliance must be configured as a Gateway (VPN Vserver) with RDP Feature enabled OR the appliance must be configured as a Gateway (VPN Vserver) and RDP Proxy Server Profile is created and set to Gateway (VPN Vserver) OR the appliance must be configured as a Auth Server (AAA Vserver) with RDP Feature enabled

Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appliance must be configured as a Gateway (VPN Vserver) with RDP Feature enabled OR the appliance must be configured as a Gateway (VPN Vserver) and RDP Proxy Server Profile is created and set to Gateway (VPN Vserver) OR the appliance must be configured as a Auth Server (AAA Vserver) with RDP Feature enabled

EPSS

Процентиль: 75%
0.00865
Низкий

8.4 High

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-119
CWE-787

Связанные уязвимости

CVSS3: 8.1
nvd
около 1 года назад

Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appliance must be configured as a Gateway (VPN Vserver) with RDP Feature enabled OR the appliance must be configured as a Gateway (VPN Vserver) and RDP Proxy Server Profile is created and set to Gateway (VPN Vserver) OR the appliance must be configured as a Auth Server (AAA Vserver) with RDP Feature enabled

CVSS3: 7.5
fstec
около 1 года назад

Уязвимость контроллера доставки приложений Citrix NetScaler Application Delivery Controller (ранее Citrix ADC), системы контроля доступа к виртуальной среде Citrix NetScaler Gateway (ранее Citrix Gateway), связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 75%
0.00865
Низкий

8.4 High

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-119
CWE-787