CVE-2017-7219 - Heap Overflow Vulnerability in Citrix NetScaler Gateway Could Result in Arbitrary Code Execution

A heap overflow vulnerability has been identified in Citrix NetScaler Gateway that could allow a remote, authenticated user to execute arbitrary commands on the NetScaler Gateway appliance as a root user. 

The following vulnerability has been addressed:

• CVE-2017-7219 (High): Heap Overflow vulnerability in Citrix NetScaler Gateway Could Result in Arbitrary Code Execution

The vulnerability affects the following versions of Citrix NetScaler Gateway:

• Version 11.1 earlier than 11.1 Build 52.13
• Version 11.0 earlier than 11.0 Build 70.12
• Version 10.5 earlier than 10.5 Build 65.11
• Version 10.1 earlier than 10.1 Build 135.8/135.12

Please note that deployments of Citrix NetScaler ADC and NetScaler Web Application Firewall (WAF) that include an enabled NetScaler Gateway instance are affected by this vulnerability. 

In deployments where NetScaler Gateway is deployed in ICA Proxy Mode only, the vulnerability does not affect the appliance firmware.

This vulnerability has been addressed in the following versions of Citrix NetScaler Gateway:

• Citrix NetScaler Gateway version 11.1 Build 52.13 and later
• Citrix NetScaler Gateway version 11.0 Build 70.12 and later
• Citrix NetScaler Gateway version 10.5 Build 65.11 and later
• Citrix NetScaler Gateway version 10.1 Build 135.8/135.12 and later 

These new versions can be downloaded from the following location:

https://www.citrix.com/downloads/netscaler-gateway.html

Citrix strongly recommends that customers using affected versions of NetScaler Gateway upgrade to a version of the appliance firmware that contains the fixes for this issue as soon as possible.

Citrix thanks Alain Mowat of SCRT (https://www.scrt.ch) for working with us to protect Citrix customers.