Citrix XenServer 7.2 Multiple Security Updates

Description of Problem A number of security issues have been identified within Citrix XenServer 7.2 which could, if exploited, allow a malicious man-in-the-middle MiTM attacker on the management network to decrypt management traffic. Collectively, this has been rated as a medium severity...

Citrix XenServer Multiple Security Updates

Description of Problem A number of vulnerabilities have been identified within Citrix XenServer that could, if exploited, allow a malicious administrator of a guest VM to crash the host and, for some XenServer versions, allow a remote attacker to compromise the host. The following vulnerabilities...

Citrix Releases Security Updates

Citrix has released security updates to address vulnerabilities in its XenServer. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. NCCIC/US-CERT encourages users and administrators to review the Citrix Security Bulletin CTX232655 and apply the...

How to use and troubleshoot NVIDIA vGPU XenMotion with XenServer

This article provides the methods to use and troubleshoot NVIDIA vGPU XenMotion feature...

Pool update does not complete when CPU feature set has changed

When applying a hotfix that contains CPU feature setchangesto a XenServer host or pool that has running VMs, the XenCenterInstall Update wizard might stop after installing the update on one or more of the hosts and display the following error: The host does not have some of the CPU features that...

Citrix XenServer Multiple Vulnerabilities (CTX231390) (Meltdown)(Spectre)

The version of Citrix XenServer running on the remote host is missing a security hotfix. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid105617; scriptversion"1.12";...

Citrix XenServer Multiple Security Updates

Important Note Due to concerns about the robustness of some of the Intel microcode updates included in the earlier hotfixes for these issues XS71ECU1009, XS72E013 and XS73E001, Citrix has superseded these hotfixes with new hotfixes listed below. Customers are strongly recommended to apply these n...

Security Bulletin: NVIDIA Driver Security Updates for CPU Speculative Side Channel Vulnerabilities

NVIDIA driver response to CPU speculative side channel vulnerabilities - CVE-2017-5753, CVE-2017-5715, CVE-2017-5754 Bulletin Summary NVIDIA is providing an initial security update to mitigate aspects of Google Project Zero’s January 3, 2018 publication of novel information disclosure attacks tha...

Citrix XenServer Guest-to-host DoS (CTX230624)

The version of Citrix XenServer installed on the remote host is missing a security hotfix. It is, therefore, affected by a denial-of-service vulnerability as noted in the CTX230624 advisory. Note this vulnerability only affects Citrix XenServer 7.2 and 7.1 LTSR CU1. C Tenable Network Security, In...

How to set customized BIOS strings to HVM VMs

This article describes the method to set customized BIOS strings to HVM VMs through xe CLI of XenServer 7.3 and later, as well as how to get customized BIOS strings on these VMs...

Citrix XenServer Security Update (CTX230624)

A security issue has been identified within Citrix XenServer that may allow the malicious administrator of a guest VM to cause the host to crash. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Security Update for Citrix XenServer

Description of Problem A security issue has been identified within Citrix XenServer that may allow the malicious administrator of a guest VM to cause the host to crash. This issue affects Citrix XenServer 7.2 and Citrix XenServer 7.1 LTSR CU1. A CVE identifier is not presently available for this...

NetScaler 11.1 - Services flap on VPX/Interface hangs observed on XenServer

Services flaps on VPX/Interface hands observed on XenServer...

Citrix XenServer Multiple Vulnerabilities (CTX230138)

The version of Citrix XenServer installed on the remote host is missing a security hotfix. It is, therefore, affected by multiple vulnerabilities as noted in the CTX230138 advisory. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid105083; scriptversion"1.10";...

XenServer Loses Network connectivity on Pool join (LACP bond entry incomplete)

Upon adding a host to an existing Pool configured with NIC Bonding of type LACP , the newly added host's NIC bond entry never finishes updating, as seen on the image below, where the Management interface never merges with the bond. The previous NIC remains as IP Setup None and the bond shows...

Citrix XenServer Multiple Security Updates (CTX230138)

A number of security vulnerabilities have been identified in Citrix XenServer that may allow a malicious administrator of an HVM guest VM to compromise the host. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Citrix XenServer Multiple Security Updates

Description of Problem A number of security vulnerabilities have been identified in Citrix XenServer that may allow a malicious administrator of an HVM guest VM to compromise the host. These vulnerabilities affect all currently supported versions of Citrix XenServer up to and including Citrix...

VMs Freezing or Poor Performance (xenvbd event ID 129)

VMs are encountering hang or poor performance issue related with disk I/O. xenvbd event ID 129 . From VM event log: ++++++++++ xenvbd event ID 129 \Device\RaidPort0 reset ++++++++++ - From XenServer messages log: ++++++++++ messages.1: Mar 8 14:11:35 MXVDIS01X tap-ctl1481: tap-err:tapctlreadraw:...

Citrix XenServer Pin Count / Page Reference Grant Table Code Guest-to-Host Memory Corruption Vulnerability (CTX229057)

The version of Citrix XenServer installed on the remote host is missing a security hotfix. It is, therefore, affected by a memory corruption vulnerability as noted in the CTX229057 advisory. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid104174; scriptversion"1.8";...

Citrix XenServer Security Update (CTX229057)

A security vulnerability has been identified in Citrix XenServer that may allow a malicious administrator of a guest VM to compromise the host. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...