CVE-2023-6549KEV · OVERDUECWE-119

Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability

High · published January 17, 2024

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 8.2. It is confirmed in active exploitation. It sits in the 99.1th percentile for exploit probability.

989
days past CISA
deadline
CVSS v3.1
8.2
EPSS
58%
Percentile
99.1
In the wild
Confirmed
What it is

🚨 A crafty attacker doesn’t need an invitation to crash your service! An unauthenticated Denial of Service vulnerability in NetScaler ADC and Gateway is causing quite the ruckus. 🔥 Think of this as a restaurant with a faulty kitchen: anyone can pull the fire alarm and flood the place, forcing everyone to evacuate, whether they were invited to dine or not! This vulnerability allows an attacker to trigger a denial of service, leaving legitimate users locked out like patrons stuck outside a closed restaurant. Worse yet, they can even read sensitive out-of-bounds memory, exposing critical data — absolutely devastating consequences for your operations!

Put simply

Think of this as a restaurant with a faulty kitchen: anyone can pull the fire alarm and flood the place, forcing everyone to evacuate, whether they were invited to dine or not! This flaw arises from improper memory buffer operations, which can be exploited to perform actions beyond designated limits, effectively crashing the service without any authentication required.

What to do

This vulnerability allows an attacker to trigger a denial of service, leaving legitimate users locked out like patrons stuck outside a closed restaurant. Worse yet, they can even read sensitive out-of-bounds memory, exposing critical data — absolutely devastating consequences for your operations! Update to the latest version immediately and review your configurations to minimize any potential impact. Implement additional network security measures to limit exposure to untrusted traffic. Don’t wait — the time to act is NOW! You’ve got this! By patching up quickly, you’ll restore safe service and reinforce your defenses! 🛡️

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.57633 · 99.1th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2024-01-17T20:15Z
KEV added
2024-01-17 · due 2024-02-07
EPSS history
Timeline
  • 17 JAN 20:15Z
    Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service…
    cvelistv5
  • 17 JAN 00:00Z
    Added to CISA KEV — remediate by Feb 7
    kev