Enable mitigations for CVE-2018-12207

Depending on your hardware, your Citrix Hypervisor or XenServer installation may be affected by the security issue with the identifierCVE-2018-12207. Citrix provides the following hotfixes to mitigate this issue: XS70E075, XS71ECU2024, XS76E012,XS80E008. For more information, seeCitrix Hypervisor...

Driver Disk for HP Smart Array RAID Controller hpsa v3.2.0-3 - For XenServer 6.0.2

BODY font-family: Arial , Helvetica , sans-serif; font-size: 80.0%;H2 font-size: 124.0%; font-weight: bold; margin-top: 12.0pt; margin-bottom: 6.0pt; padding-top: 5.0px;H3 font-size: 100.0%; font-weight: bold; margin-top: 12.0pt; margin-bottom: 6.0pt;H4 font-size: 80.0%; margin-top: 24.0pt;...

Hotfix WSS11E001 - For XenServer 6.x with WebSelfService

BODY font-family: Arial , Helvetica , sans-serif; font-size: 80.0%;H2 font-size: 124.0%; font-weight: bold; margin-top: 12.0pt; margin-bottom: 6.0pt; padding-top: 5.0px;H3 font-size: 100.0%; font-weight: bold; margin-top: 12.0pt; margin-bottom: 6.0pt;H4 font-size: 80.0%; margin-top: 24.0pt;...

Citrix Security Advisory for TCP/IP Reassembly Resource Exhaustion

Description of Problem Several vulnerabilities in TCP/IP reassembly commonly known as SegmentSmack and FragmentSmack have recently been disclosed. SegmentSmack is CVE-2018-5390 for Linux and CVE-2018-6922 for FreeBSD. FragmentSmack is CVE-2018-5391 for Linux and CVE-2018-6923 for FreeBSD. These...

Citrix Hypervisor Security Update

Description of Problem An issue has been discovered in Citrix Hypervisor that, if exploited, could potentially allow an attacker on the management network to enumerate valid administrative account usernames. Note that this attack does not disclose the corresponding passwords and does grant not...

Vulnerabilities fixed in Xen, Citrix XenServer and Hypervisor

Vulnerabilities have been fixed in Xen, Citrix XenServer and Hypervisor. The vulnerabilities allow a malicious party to cause a denial-of-service DoS or to execute arbitrary code execute arbitrary code under application privileges. -= Citrix Xenserver =- Citrix has released updates to fix the...

How to Install Virtual License Server Appliance

How to import Virtual License server Appliance on XenServer Pool...

How to Remove a Storage Repository from XenServer

This article describes how to remove a Storage Repository SR on a XenServer host when the Storage Repository is experiencing issues, or if you wish to discontinue using the Storage Repository. A XenServer Storage Repository is used to Store ISOs or Virtual Machine VM Virtual Disks VDIs. The Stora...

Error: "The operation could not be performed because a redo log is enabled on the Pool"

After upgradingSDX to 12.0 build, the user is gettingerror while trying to configure network settings for XenServer using LOM...

How to Check HBA Host and its Corresponding WWPN on XenServer

This article explains how to check HBA host and its corresponding WWPN on XenServer...

The vulnerability of the XenServer server virtualization platform, related to incorrect restrictions on the path name to the restricted access catalog, allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of the XenServer server virtualization platform is related to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to information and compromise its...

CVE-2012-4606

Citrix XenServer 4.1, 6.0, 5.6 SP2, 5.6 Feature Pack 1, 5.6 Common Criteria, 5.6, 5.5, 5.0, and 5.0 Update 3 contains a Local Privilege Escalation Vulnerability which could allow local users with access to a guest operating system to gain elevated privileges...

Privilege escalation

Citrix XenServer 4.1, 6.0, 5.6 SP2, 5.6 Feature Pack 1, 5.6 Common Criteria, 5.6, 5.5, 5.0, and 5.0 Update 3 contains a Local Privilege Escalation Vulnerability which could allow local users with access to a guest operating system to gain elevated privileges...

CVE-2012-4606

Citrix XenServer is affected by a Local Privilege Escalation vulnerability (CVE-2012-4606) in multiple releases: 4.1, 6.0, 5.6 SP2, 5.6 FP1, 5.6, 5.5, 5.0, and 5.0 Update 3. The flaw enables local users with access to a guest OS to gain elevated privileges on the host. Exploitation details or exa...

CVE-2012-4606

Citrix XenServer 4.1, 6.0, 5.6 SP2, 5.6 Feature Pack 1, 5.6 Common Criteria, 5.6, 5.5, 5.0, and 5.0 Update 3 contains a Local Privilege Escalation Vulnerability which could allow local users with access to a guest operating system to gain elevated privileges...

Xen CVE-2019-19583 Denial of Service Vulnerability

Description Xen is prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. Xen Xen version through 4.12.0 are vulnerable. Technologies Affected Citrix Hypervisor 8.0 Citrix XenServer 7.0 Citrix XenServer...

Xen CVE-2019-19580 Incomplete Fix Local Privilege Escalation Vulnerability

Description Xen is prone to a local privilege-escalation vulnerability. Local attacker can exploit this issue to gain elevated privileges on affected computers. Xen version 4.12.x and prior are vulnerable. Technologies Affected Citrix Hypervisor 8.0 Citrix XenServer 7.0 Citrix XenServer 7.1 LTSR...

Xen CVE-2019-19577 Denial of Service Vulnerability

Description Xen is prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. Xen Xen version through 4.12.0 are vulnerable. Technologies Affected Citrix Hypervisor 8.0 Citrix XenServer 7.0 Citrix XenServer...

Citrix Xenserver Directory Traversal (CVE-2018-14007)

A directory traversal vulnerability exists in citrix xenserver. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

Multiple Intel Processors Side Channel CVE-2019-11135 Information Disclosure Vulnerability

Description Multiple Intel Processors are prone to a local information-disclosure vulnerability. A local attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Citrix Hypervisor 8.0 Citrix XenServer 7.0 Citrix XenServer 7.1 LTSR CU2...