CVE-2020-8246: 
NixOS vulnerability analysis and mitigation

A denial of service vulnerability (CVE-2020-8246) was identified in multiple Citrix products including Citrix ADC, Citrix Gateway, NetScaler Gateway, and Citrix SD-WAN WANOP appliances. The vulnerability affects multiple versions including Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, and several other versions of the affected products. The vulnerability was initially recorded on January 28, 2020 (CVE MITRE).

The vulnerability is classified under CWE-400: Uncontrolled Resource Consumption. The issue specifically allows for a denial of service attack that can be initiated from the management network (Citrix Support).

When exploited, this vulnerability can result in a denial of service condition, potentially affecting the availability of the affected Citrix services and systems (CVE MITRE).

The vulnerability can be exploited through the management network interface of affected Citrix products (Citrix Support).

Citrix has released security updates to address this vulnerability. The recommended mitigation is to upgrade to the following versions: Citrix ADC and Gateway 13.0-64.35 or later, NetScaler Gateway 12.1-58.15 or later, ADC 12.1-FIPS 12.1-55.187 or later, and corresponding security updates for SD-WAN WANOP appliances (CVE MITRE).