Citrix Issues Urgent Patches for Ten Critical NetScaler Vulnerabilities

Citrix has released a significant security update for its NetScaler application delivery controllers and gateways, patching 28 vulnerabilities in total. Ten of these flaws are rated as critical, stemming from memory overflow issues across multiple components including Packet Processing, DNS, and authentication services. These could allow attackers to cause denial-of-service conditions or lead to unpredictable system behavior.

The vulnerabilities affect widely deployed enterprise networking products, potentially exposing corporate network perimeters. Citrix strongly recommends customers patch immediately, as NetScaler products have been frequent targets for threat actors in the past. While there's no evidence of current exploitation, the critical nature of these flaws makes prompt updating essential for organizational security.

What to do: Update NetScaler ADC and Gateway to versions 14.1-73.57 or later, 13.1-64.39 or later, 14.1-73.58 FIPS or later, or 13.1-FIPS and 13.1-NDcPP 13.1-37.293 or later.