Citrix

Brkdncr, 11 months ago in Windows and Linux Virtual Delivery Agent for CVAD and Citrix DaaS Security Bulletin CVE-2023-24490

Description of Problem

A vulnerability has been identified that, if exploited, could result in the below mentioned security vulnerability.
All Virtual Delivery Agents for Windows or Linux used by Citrix Virtual Apps and Desktops and Citrix DaaS are impacted
The vulnerability affects the following supported versions of Windows Virtual Delivery Agent:

• Current Release (CR)
• Citrix Virtual Apps and Desktops versions before 2305
• Long Term Service Release (LTSR)
• Citrix Virtual Apps and Desktops 2203 LTSR before CU3
• Citrix Virtual Apps and Desktops 1912 LTSR before CU7

The vulnerability affects the following supported versions of Linux Virtual Delivery Agent:

• Current Release (CR)
• Linux Virtual Delivery Agent version before 2305
• Long Term Service Release (LTSR)
• Linux Virtual Delivery Agent 2203 LTSR before CU3
• Linux Virtual Delivery Agent 1912 LTSR before CU7 hotfix 1(19.12.7001)