Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability (CVE-2023-4966)

What is the Attack?

According to the blog published by Citrix, CVE-2023-4966 is a buffer overflow vulnerability that can result in unauthorized data disclosure on Citrix NetScaler ADC and NetScaler Gateway products.

These products when configured as a gateway or as an authentication, authorization and auditing (AAA) virtual servers have this particular weakness. The advisory also states that the vulnerability is rated critical, and no workarounds are available. Only an upgrade to the affected products can mitigate the attack.


Why …

adc attack auditing authentication authorization blog buffer buffer overflow buffer overflow vulnerability citrix citrix netscaler citrix netscaler adc cve cve-2023-4966 data disclosure gateway netscaler netscaler adc netscaler gateway overflow products result servers virtual vulnerability what is