CVE-2024-8534: Memory safety vulnerability leading to memory corruption and Denial of Service

Q: What is the severity of CVE-2024-8534?

CVE-2024-8534 is classified as a memory safety vulnerability that can lead to memory corruption and Denial of Service.

Q: How do I fix CVE-2024-8534?

To fix CVE-2024-8534, ensure that your Citrix NetScaler ADC or Gateway is updated to the latest security patches provided by Citrix.

Q: Which products are affected by CVE-2024-8534?

CVE-2024-8534 affects Citrix NetScaler ADC and Citrix Gateway when configured with RDP features enabled.

Q: What are the consequences of exploiting CVE-2024-8534?

Exploiting CVE-2024-8534 can lead to memory corruption and result in a Denial of Service, impacting service availability.

Q: Is CVE-2024-8534 easy to exploit?

The exploitability of CVE-2024-8534 depends on the specific configuration of the affected Citrix products, particularly if RDP is enabled.

Published Nov 12, 2024

Updated

Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appliance must be configured as a Gateway (VPN Vserver) with RDP Feature enabled OR the appliance must be configured as a Gateway (VPN Vserver) and RDP Proxy Server Profile is created and set to Gateway (VPN Vserver) OR the appliance must be configured as a Auth Server (AAA Vserver) with RDP Feature enabled

Affected Software

9 affected components

Citrix NetScaler ADC

Citrix Gateway

Citrix NetScaler Application Delivery Controller>=12.1<12.1-55.321

Citrix NetScaler Application Delivery Controller>=12.1<13.1-55.34

Citrix NetScaler Application Delivery Controller>=13.1<13.1-37.207

Citrix NetScaler Application Delivery Controller>=14.1<14.1-29.72

Citrix NetScaler Gateway>=12.1<13.1-55.34

Citrix NetScaler Gateway>=14.1<14.1-29.72

Event History

Nov 12, 2024

CVE Published

via MITRE·06:15 PM

Data Sourced

via MITRE·06:15 PM

DescriptionWeakness

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-8534?

CVE-2024-8534 is classified as a memory safety vulnerability that can lead to memory corruption and Denial of Service.

How do I fix CVE-2024-8534?

To fix CVE-2024-8534, ensure that your Citrix NetScaler ADC or Gateway is updated to the latest security patches provided by Citrix.

Which products are affected by CVE-2024-8534?

CVE-2024-8534 affects Citrix NetScaler ADC and Citrix Gateway when configured with RDP features enabled.

What are the consequences of exploiting CVE-2024-8534?

Exploiting CVE-2024-8534 can lead to memory corruption and result in a Denial of Service, impacting service availability.

Is CVE-2024-8534 easy to exploit?