Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service

This article details six newly discovered vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway software, potentially allowing for denial-of-service attacks and arbitrary file reads. The vulnerabilities, ranging in severity from 6.9 to 8.8, stem from issues with input validation and memory management. Citrix has released patches for affected versions, emphasizing the importance of timely updates due to the appliance's history as a target for ransomware attacks. The vulnerabilities were reported by multiple researchers, highlighting ongoing concerns about NetScaler's memory management.