This vulnerability in NetScaler ADC and NetScaler Gateway involves multiple memory overflow conditions. These overflows occur under specific configurations: when the device is set as a load balancer of type Oracle, or as a DNS proxy, or as a DNS recursive resolver. Exploitation can lead to unpredictable or erroneous behavior and denial of service conditions. The CVSS 4.0 base score is 8.8, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, low confidentiality and integrity impact, and high availability impact. The vendor has not published any patch or official remediation at this time.

Successful exploitation can cause denial of service and unpredictable or erroneous behavior on affected NetScaler ADC devices configured in the specified roles. This can disrupt network services relying on these configurations, impacting availability and potentially causing operational outages.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, administrators should review configurations involving Oracle load balancing, DNS proxy, and DNS recursive resolver roles on NetScaler ADC versions 13.1 and 14.1 and consider temporary mitigations such as disabling or limiting these features if feasible.