CVE-2024-8534

Published Nov 12, 2024

Last updated 4 days ago

Overview

Description
Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appliance must be configured as a Gateway (VPN Vserver) with RDP Feature enabled OR the appliance must be configured as a Gateway (VPN Vserver) and RDP Proxy Server Profile is created and set to Gateway (VPN Vserver) OR the appliance must be configured as a Auth Server (AAA Vserver) with RDP Feature enabled
Source
secure@citrix.com
NVD status
Awaiting Analysis

Risk scores

CVSS 4.0

Type
Secondary
Base score
8.4
Impact score
-
Exploitability score
-
Vector string
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity
HIGH

CVSS 3.1

Type
Secondary
Base score
5.3
Impact score
1.4
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Severity
MEDIUM

Weaknesses

secure@citrix.com
CWE-119

Social media

Hype score
Not currently trending
  1. On November 12, 2024, Cloud Software Group released builds to fix CVE-2024-8534 and CVE-2024-8535, which affect #NetScalerADC and #NetScalerGateway. For more information and details, read our blog: https://t.co/NWvmSqwy2T

    @NetScaler

    14 Nov 2024

    231 Impressions

    0 Retweets

    3 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. CVE-2024-8534 Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appliance must be configured as a Gateway (VPN Vserve… https://t.co/oILXcoXpZH

    @CVEnew

    12 Nov 2024

    254 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  3. Citrix NetScaler ADCおよびNetScaler Gatewayにおける脆弱性 CVE-2024-8534 メモリの安全性に関する脆弱性であり、メモリ破損やDoSを引き起こす可能性 CVSS 8.4 CVE-2024-8535 認証済みのユーザーが意図しない操作権限を持つ可能性 CVSS 5.8 速やかなアップグレードを推奨します。 https://t.co/cehVqgXwz8

    @t_nihonmatsu

    12 Nov 2024

    301 Impressions

    0 Retweets

    1 Like

    1 Bookmark

    0 Replies

    0 Quotes

  4. NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2024-8534 and CVE-2024-8535 https://t.co/XfchQFkJzX

    @autumn_good_35

    12 Nov 2024

    369 Impressions

    0 Retweets

    2 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  5. Citrix addresses NetScaler Vulnerabilities CVE-2024-8534 and CVE-2024-8535 #NetScalerADC #Citrix #CVE-2024-8534 #CVE-2024-8535 https://t.co/3ooEjhqG9F

    @pravin_karthik

    12 Nov 2024

    53 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  6. Check out the latest article in my newsletter: NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2024-8534 and CVE-2024-8535 https://t.co/31sUAXNeWC via @LinkedIn

    @AndrewScott_8

    12 Nov 2024

    140 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes