CVE-2023-4967
Assigner: Citrix
Published: 2023-10-27T18:01:59.707Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: NetScaler ADC
vendor: Cloud Software Group
versions: lessThan: 8.50
status: affected
version: 14.1
versionType: patch
lessThan: 49.15
status: affected
version: 13.1
versionType: patch
lessThan: 92.19
status: affected
version: 13.0
versionType: patch
lessThan: 37.164
status: affected
version: 13.1-FIPS
versionType: patch
lessThan: 55.300
status: affected
version: 12.1-FIPS
versionType: patch
lessThan: 55.300
status: affected
version: 12.1-NDcPP
versionType: patch
defaultStatus: unaffected
product: NetScaler Gateway
vendor: Cloud Software Group
versions: lessThan: 8.50
status: affected
version: 14.1
versionType: patch
lessThan: 49.15
status: affected
version: 13.1
versionType: patch
lessThan: 92.19
status: affected
version: 13.0
versionType: patch
descriptions: supportingMedia: base64: no
type: text/html
value: Denial of Service in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA Virtual Server
value: Denial of Service in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA Virtual Server
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.2
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-119
description: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
type: CWE
source: discovery: UNKNOWN
title: Denial of service
x_generator: engine: Vulnogram 0.1.0-dev