Citrix XenServer Multiple Vulnerabilities (CTX212736)

The version of Citrix XenServer running on the remote host is affected by multiple vulnerabilities in the bundled versions of OpenSSL and QEMU : - Multiple flaws exist in the bundled version of OpenSSL in the aesnicbchmacsha1cipher and aesnicbchmacsha256cipher functions that are triggered when th...

Citrix XenServer Multiple Security Updates (CTX212736)

A number of security vulnerabilities have been identified in Citrix XenServer that may allow a malicious administrator of a guest VM depending on configuration or an attacker on the management network to compromise the host. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might b...

CVE-2015-7547 - Citrix Security Advisory for glibc Vulnerability

Overview A vulnerability has been recently disclosed in the glibc getaddrinfo function. This issue could potentially allow an attacker to inject code into a process that calls the vulnerable function. The issue has been assigned the following CVE identifier: CVE-2015-7547: The vulnerable function...

Citrix XenServer Security Update for CVE-2016-1571 (CTX205496)

A security vulnerability has been identified in Citrix XenServer that could, if exploited, allow a malicious administrator of a guest VM to crash the host in certain deployments SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Citrix XenServer Multiple Security Updates (CTX203879)

A number of security vulnerabilities have been identified in Citrix XenServer that could, in certain configurations, allow a malicious administrator of a guest VM to compromise the host or obtain potentially sensitive information from other guest VMs. In addition, a vulnerability has been...

Citrix XenServer Multiple memory_exchange() Hypercall Error Handling DoS (CTX203451)

The version of Citrix XenServer running on the remote host is affected by multiple denial of service vulnerabilities due to multiple flaws in the memoryexchange function in memory.c that are triggered when handling hypercall XENMEMexchange errors. A local attacker within a guest can exploit these...

Citrix XenServer Security Update for CVE-2015-8339 & CVE-2015-8340 (CTX203451)

A security vulnerability has been identified in Citrix XenServer that may allow a malicious administrator of a guest VM to crash the XenServer host. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Citrix XenServer Multiple Security Updates (CTX202404)

A number of security vulnerabilities have been identified in Citrix XenServer that may allow a malicious administrator of a guest VM to compromise the host and guest users to crash the host. These vulnerabilities affect all currently supported versions of Citrix XenServer up to and including Citr...

Citrix XenServer Security Update for CVE-2015-5307 and CVE-2015-8104 (CTX202583)

A security vulnerability has been identified in Citrix XenServer that may allow a malicious administrator of an HVM guest VM to crash the host. This vulnerability affects all currently supported versions of Citrix XenServer up to and including Citrix XenServer 6.5 Service Pack 1...

Citrix XenServer Multiple Infinite Loop Guest-to-Host DoS (CTX202583)

The version of Citrix XenServer running on the remote host is affected by multiple denial of service vulnerabilities : - An infinite loop condition exists in the KVM subsystem that is triggered when handling a stream of AC Alignment Check exceptions. A local attacker within a virtualized guest ca...

Vulnerability in Citrix XenServer Could Result in Information Disclosure (CTX201717)

A vulnerability has been identified in Citrix XenServer which could, if exploited, allow a malicious administrator of an HVM guest VM to obtain meta-data about their own VM. Citrix is presently unaware of any meta-data that might be leaked that would be of value to a malicious guest administrator...

Citrix XenServer QEMU RTL8139 Guest Network Device Information Disclosure (CTX201717)

The version of Citrix XenServer running on the remote host is affected by an information disclosure vulnerability due to improper validation of user-supplied input in the C+ mode offload emulation of the RTL8139 network card device model in QEMU. A remote attacker can exploit this to read process...

Citrix XenServer Security Update for CVE-2015-5154 (CTX201593)

A security vulnerability has been identified in Citrix XenServer that may allow a malicious administrator of an HVM guest VM to compromise the host. This vulnerability affects all currently supported versions of Citrix XenServer up to and including Citrix XenServer 6.5 Service Pack 1...

Citrix XenServer QEMU IDE Buffer Overflow Code Execution (CTX201593)

The version of Citrix XenServer running on the remote host is affected by a heap buffer overflow condition in the IDE subsystem of the bundled QEMU software, which is related to I/O buffer access when handling certain ATAPI commands. An attacker, with sufficient privileges in an HVM guest VM, can...

Citrix XenServer Multiple Security Updates (CTX201145)

A number of security vulnerabilities have been identified in Citrix XenServer that may allow a malicious administrator of a guest VM to crash the host. These vulnerabilities affect all currently supported versions of Citrix XenServer up to and including Citrix XenServer 6.5 Service Pack 1...

Citrix XenServer QEMU FDC Buffer Overflow RCE (CTX201078) (VENOM)

The remote host is running a version of Citrix XenServer that is affected by a flaw in the Floppy Disk Controller FDC in the bundled QEMU software due to an overflow condition in hw/block/fdc.c when handling certain commands. An attacker, with access to an account on the guest operating system wi...

Citrix XenServer Multiple Vulnerabilities (CTX200892)

The version of Citrix XenServer installed on the remote host is affected by multiple vulnerabilities : - A flaw exists in the VGA emulator in QEMU that allows a local guest user to read host memory by setting the display to a high resolution. CVE-2014-3615 - A flaw exists in the setpixelformat...

Citrix XenServer Multiple Security Updates (CTX200892)

A number of security vulnerabilities have been identified in Citrix XenServer. These vulnerabilities could, if exploited, allow a malicious administrator of an HVM guest to compromise the host. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced...

Citrix XenServer Shellshock Security Update (CTX200223)

A number of security vulnerabilities have been identified in the bash SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Citrix XenServer Multiple Security Updates (CTX140984)

A number of security vulnerabilities have been identified in Citrix XenServer. These vulnerabilities affect all currently supported versions of Citrix XenServer up to and including Citrix XenServer 6.2 Service Pack 1. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be...