Citrix Hypervisor Security Bulletin for CVE-2022-33748 & CVE-2022-33749

Several security issues have been identified in Citrix Hypervisor 8.2 LTSR CU1. These are:

A malicious privileged user in a guest VM working in collaboration with a malicious privileged user in another guest VM can cause the host to crash or become unresponsive.
This issue has the following CVE identifier:

• CVE-2022-33748
  A malicious unauthenticated user on the management network may be able to cause the management service on the host to crash or become unresponsive.
  This issue has the following CVE identifier:

• CVE-2022-33749
  Some recent Intel CPUs execute certain instructions with data operand dependent timing that may allow an attacker to perform a timing-based side-channel attack. The update described below enables data operand independent timing on those CPUs.