Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2023-6549] OOB Memory Read: Netscaler ADC and Gateway

bishopfox.com | blog | CVE-2023-6549 | #citrix | #netscaler | #patch-management | #vulnerability-disclosure | #cve-2023-6549 | #out-of-bounds-read

Summary

Bishop Fox details an unauthenticated out-of-bounds memory read in Citrix NetScaler ADC and Gateway (CVE-2023-6549) that can leak prior POST request bodies; patched releases listed per CTX584986.
Published
Collected

original ↗

Related coverage

  1. Delivering Peace of Mind About New Citrix Emerging Threat (bishopfox.com)
  2. Critical vulnerabilities in NetScaler ADC exploited in-the-wild: everything you need to know (wiz.io)
  3. Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490 (bishopfox.com)
  4. No Crash Required: Verifying the Citrix NetScaler SAML Patch for CVE-2026-8452 (bishopfox.com)
  5. Analysis and Exploitation of CVE-2023-3519 (bishopfox.com)
  6. Citrix ADC Gateway RCE: CVE-2023-3519 is Exploitable, and 53% of Servers Are Unpatched (bishopfox.com)

back