535 matches found
CVE-2016-5302
Citrix XenServer 7.0 before Hotfix XS70E003, when a deployment has been upgraded from an earlier release, might allow remote attackers on the management network to "compromise" a host by leveraging credentials for an Active Directory account...
Code injection
Citrix XenServer 7.0 before Hotfix XS70E003, when a deployment has been upgraded from an earlier release, might allow remote attackers on the management network to "compromise" a host by leveraging credentials for an Active Directory account...
CVE-2016-5302
CVE-2016-5302 affects Citrix XenServer 7.0 before hotfix XS70E003, where deployments upgraded from an earlier release are vulnerable to AD credential abuse on the management network. An unauthenticated attacker with AD credentials for an account not authorized to manage a XenServer host can remot...
CVE-2016-5302
Citrix XenServer 7.0 before Hotfix XS70E003, when a deployment has been upgraded from an earlier release, might allow remote attackers on the management network to "compromise" a host by leveraging credentials for an Active Directory account...
CVE-2016-5302 - Citrix XenServer Security Update
Description of Problem A security vulnerability has been identified in XenServer 7.0 that may allow an attacker on the management network who is in possession of Active Directory credentials for an AD account that is not authorised to manage a XenServer host to compromise that host. The following...
Citrix XenServer Multiple Vulnerabilities (CTX212736)
The version of Citrix XenServer running on the remote host is affected by multiple vulnerabilities in the bundled versions of OpenSSL and QEMU : - Multiple flaws exist in the bundled version of OpenSSL in the aesnicbchmacsha1cipher and aesnicbchmacsha256cipher functions that are triggered when th...
Local Storage Does Not Repair After Reboot of XenServer
Local storage will not repair after XenServer is rebooted...
Citrix XenServer Multiple Security Updates (CTX212736)
A number of security vulnerabilities have been identified in Citrix XenServer that may allow a malicious administrator of a guest VM depending on configuration or an attacker on the management network to compromise the host. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might b...
How To perform Emergency Network Reset on Citrix Hypervisor/XenServer
To configure or restore the management interface from either XSCONSOLE or from CLI command-line interface...
Error: "The pool failed to enable external authentication" on XenServer
Unable to join the XenServer hosts to Active directory domain. The computer account is created in the domain but the following error continues to appear: Enabling Active Directory Authentication on pool … “Error: The pool failed to enable external authentication.” In the xensource.log the followi...
How to Remove ovs-vswitchd Manager Permanently from XenServer Config
This article describes how to remove ovs-vswitchd manager permanently from XenServer config. Citrix Distributed Virtual Switch/Controller DVSC that connects to the open-vswitchd running on the XenServer DOM0 machines. DVSC is proved to cause some trouble with the Virtual Machines VMs. In...
Error: "Virtual Disk is Owned By Control Domain" in XenServer
- Storage Repository shows a virtual disk attached to a "Control Domain" - VDIs cannot be deleted with errors that the VDI is not managed by this host. - Multipathing cannot be enable on the SR because the VDIs are not managed by this host...
How to Troubleshoot Multiple HBA Cards Issue in XenServer
How to troubleshoot multiple HBA Cards issue...
How to trigger a memory dump from a Windows virtual machine
This article describes how to trigger and capture a memory dump from a Windows Virtual Machine VM running on a XenServer 8 or Citrix Hypervisor 8.2 CU1 host. Refer to the Microsoft KB article, Generate a kernel or complete crash dump for more information. Troubleshooting unresponsive Windows VMs...
CVE-2015-7547 - Citrix Security Advisory for glibc Vulnerability
Overview A vulnerability has been recently disclosed in the glibc getaddrinfo function. This issue could potentially allow an attacker to inject code into a process that calls the vulnerable function. The issue has been assigned the following CVE identifier: CVE-2015-7547: The vulnerable function...
Citrix XenServer Multiple Security Updates (CTX203879)
A number of security vulnerabilities have been identified in Citrix XenServer that could, in certain configurations, allow a malicious administrator of a guest VM to compromise the host or obtain potentially sensitive information from other guest VMs. In addition, a vulnerability has been...
Citrix XenServer Security Update for CVE-2016-1571 (CTX205496)
A security vulnerability has been identified in Citrix XenServer that could, if exploited, allow a malicious administrator of a guest VM to crash the host in certain deployments SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...
Stop Error "0x0000005D" or "0x000000C4" Appears When Installing Windows Server 2012 in XenServer 6.x
Stop Error "0x0000005D" or "0x000000C4" appears when starting a Virtual Machine from the Windows Server 2012 ISO, in order to install the system. The error occurs right after loading the setup files, before the actual setup starts...
Citrix XenServer Multiple memory_exchange() Hypercall Error Handling DoS (CTX203451)
The version of Citrix XenServer running on the remote host is affected by multiple denial of service vulnerabilities due to multiple flaws in the memoryexchange function in memory.c that are triggered when handling hypercall XENMEMexchange errors. A local attacker within a guest can exploit these...
Citrix XenServer Security Update for CVE-2015-8339 & CVE-2015-8340 (CTX203451)
A security vulnerability has been identified in Citrix XenServer that may allow a malicious administrator of a guest VM to crash the XenServer host. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...