First published: Thu Aug 05 2021(Updated: )
A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO. These vulnerabilities, if exploited, could lead to the limited available disk space on the appliances being fully consumed.
Credit: support@hackerone.com
Affected Software | Affected Version | How to fix |
---|---|---|
Citrix Application Delivery Controller Firmware | >=11.1<11.1-65.22 | |
Citrix Application Delivery Controller Firmware | >=12.1<12.1-62.27 | |
Citrix Application Delivery Controller Firmware | >=13.0<13.0-82.45 | |
Citrix Application Delivery Controller | ||
Citrix Application Delivery Controller Firmware | >=12.1<12.1-55.238 | |
Citrix Mpx\/sdx 14030 Fips | ||
Citrix Mpx\/sdx 14060 Fips | ||
Citrix Mpx\/sdx 14080 Fips | ||
Citrix Mpx 15030-50g Fips | ||
Citrix Mpx 15040-50g Fips | ||
Citrix Mpx 15060-50g Fips | ||
Citrix Mpx 15080-50g Fips | ||
Citrix Mpx 15100-50g Fips | ||
Citrix Mpx 15120-50g Fips | ||
Citrix Mpx 8905 Fips | ||
Citrix Mpx 8910 Fips | ||
Citrix Mpx 8920 Fips | ||
Citrix Gateway | >=12.1<12.1-62.27 | |
Citrix Gateway | >=13.0<13.0-82.45 | |
Citrix NetScaler Gateway | >=11.1<11.1-65.22 | |
Citrix SD-WAN WANOP | >=10.2<10.2.9.b | |
Citrix SD-WAN WANOP | >=11.2<11.2.3.b | |
Citrix SD-WAN WANOP | >=11.3<11.3.2.a | |
Citrix SD-WAN WANOP | >=11.4<11.4.0.a | |
Citrix 4000-wo | ||
Citrix 4100-wo | ||
Citrix 5000-wo | ||
Citrix 5100-wo |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID of this Citrix ADC vulnerability is CVE-2021-22919.
The severity level of CVE-2021-22919 is high.
CVE-2021-22919 affects Citrix ADC (formerly known as NetScaler ADC), Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO.
If exploited, CVE-2021-22919 could lead to the limited available disk space on the affected systems.
More information about CVE-2021-22919 and how to fix it can be found in the official Citrix support article: https://support.citrix.com/article/CTX319135.