Xen Missing memory barriers DoS (XSA-340)

A denial of service DoS vulnerability exists in Xen servers when accessing/allocating an event channel due to a missing memory barrier. An authenticated, local attacker may be able to cause a hypervisor crash resulting in a Denial of Service DoS. Note that Nessus has not tested for this issue but...

New Surface PCs enable virtualization-based security (VBS) by default to empower customers to do more, securely

VBS and HVCI-enabled devices help protect from advanced attacks Escalation of privilege attacks are a malicious actor’s best friend, and they often target sensitive information stored in memory. These kinds of attacks can turn a minor user mode compromise into a full compromise of your OS and...

Hotfix XS82E011 - for Citrix Hypervisor 8.2

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2. All customers who are affected by the issues described inCTX286511 - Citrix Hypervisor Multiple Security Updatesshould install this hotfix. Information About this Hotfix Component| Details ---|---...

Available driver versions for XenServer and Citrix Hypervisor

Latest driver disk updates for XenServer and Citrix Hypervisor We work with partner organizations to ensure that drivers are available to enable new hardware and resolve critical issues. We regularly deliver updated versions of these drivers when partner organizations provide them to us. For Citr...

Hotfix XS82E006 - For Citrix Hypervisor 8.2

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2. Information About this Hotfix Component| Details ---|--- Prerequisite| None Post-update tasks| None Content live patchable| No Baselines for Live Patch| N/A Revision History| Published on Nov 03, 2020...

Hotfix XS82E013 - For Citrix Hypervisor 8.2

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2. All customers who are affected by the issues described inCTX286756 - Citrix Hypervisor Multiple Security Updatesshould install this hotfix. Information About this Hotfix Component| Details ---|---...

Hotfix XS82E010 - for Citrix Hypervisor 8.2

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2. All customers who are affected by the issues described inCTX285937 - Citrix Hypervisor Multiple Security Updatesshould install this hotfix. Information About this Hotfix Component| Details ---|---...

Hotfix XS82E002 - For Citrix Hypervisor 8.2

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2. Information About this Hotfix Component| Details ---|--- Prerequisite| None Post-update tasks| Restart the XAPI Toolstack Content live patchable| No Baselines for Live Patch| N/A Revision History|...

Hotfix XS82E012 - For Citrix Hypervisor 8.2

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2. All customers who are affected by the issues described inCTX286756 - Citrix Hypervisor Multiple Security Updatesshould install this hotfix. Information About this Hotfix Component| Details ---|---...

Hotfix XS81E014 - For Citrix Hypervisor 8.1

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.1. All customers who are affected by the issues described inCTX286756 - Citrix Hypervisor Multiple Security Updatesshould install this hotfix. Note: This hotfix is available only to customers on theCustomer...

Driver Disk for Microsemi aacraid 1.2.1.60001 - For Citrix Hypervisor 8.x CR

Who Should Install this Driver Disk? Customers running a Citrix Hypervisor 8.x release who use Microsemi's aacraid driver and wish to use the latest version of the following: Driver Module| Version ---|--- aacraid| 1.2.1.60001 Issues Resolved In this Driver Disk Includes general enhancements and...

Hotfix XS82E014 - For Citrix Hypervisor 8.2

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2. All customers who are affected by the issues described inCTX286756 - Citrix Hypervisor Multiple Security Updatesshould install this hotfix. Information About this Hotfix Component| Details ---|---...

XENMEM_aquire_resources Error Path DoS (XSA-334)

A denial of service DoS vulnerability exists in Xen servers XENMEMacquireresource due to an error path exiting without releasing an RCU Read, Copy, Update reference. An authenticated, local attacker can exploit this issue, via a malicious HVM stubdomain which can cause an RCU reference to be...

Xen Control Block DoS (XSA-358)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a denial of service vulnerability. Recording of the per-vCPU control block mapping maintained by Xen and that of pointers into the control block is reversed. The consumer assumes, seeing...

Xen xenstore watch notification Information Disclosure (XSA-115)

"According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by an information disclosure vulnerability due to a lack of permission checks for xenstore watch event reporting. A guest administrator can watch the root xenstored node, which will cause...

Xen Management Tool DoS (XSA-323)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a denial of service vulnerability due to a bad path name limit in oxenstored. A malicious guest administrator can exploit this, by creating paths in the guest's own namespace that are too...

PT-2021-7293 · Xen +4 · Xen +4

Name of the Vulnerable Software and Affected Versions: Xen affected versions not specified Description: The issue is related to a component of the Xen hypervisor, specifically the blkfront component, which has a resource release error. This can be exploited by a remote attacker to cause a denial ...

PT-2021-7286 · Unknown +4 · Xen Hypervisor +4

Name of the Vulnerable Software and Affected Versions: Xen hypervisor netfront component affected versions not specified Description: The issue is related to errors in resource release in the netfront component of the Xen hypervisor. Exploitation of this issue may allow an attacker to cause a...

Xen xenstored watch DoS (XSA-324)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a denial of service vulnerability due to an issue with max payload length in xenstored. A malicious guest can exploit this, by registering a 'watch' with using a very large tag, to cause ...

Xen IRQ Infinite Loop DoS (XSA-356)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a denial of service vulnerability due to an issue when handling IRQ vectors. When moving IRQs between CPUs to distribute the load of IRQ handling, IRQ vectors are dynamically allocated an...