CVE-2024-5491 — Improper Restriction of Operations within the Bounds of a Memory Buffer in ADC

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory BufferCWE-601 — Open Redirect3 documents3 sources
Severity
7.2HIGHNVD
EPSS
0.4%
top 40.07%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
Netscaler ADCNetscaler GatewayCitrix Netscaler Application Delivery Controller+5 more
Timeline
PublishedJul 10

Description

Denial of Service in NetScaler ADC and NetScaler Gateway in NetScaler

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N

Affected Packages9 packages

▶NVDcitrix/netscaler_gateway12.1 — 13.0-92.31+2
▶CVEListV5netscaler/netscaler_gateway14.1 — 25.53+2
▶CVEListV5netscaler/netscaler_adc14.1 — 25.53+5

🔴Vulnerability Details

1
GHSA
GHSA-p959-c7xj-w3cr: Denial of Service in NetScaler ADC and NetScaler Gateway in NetScaler↗2024-07-10
▶

📋Vendor Advisories

1
Citrix
NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2024-5491 and CVE-2024-5492↗2024-07-09
▶