XenServer Multiple Security Vulnerabilities

Bugtraq ID:	105985
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 20 2018 12:00AM
Updated:	Nov 20 2018 12:00AM
Credit:	Paul Durrant, Matthew Daley
Vulnerable:	Xen Xen 4.9.3 Xen Xen 4.0.4 Xen Xen 4.0.1 Xen Xen 4.1 Xen Xen 4.0.3 Xen Xen 4.0.2 Xen Xen 4.0.0 Xen Xen 4.0 Xen Xen 3.4.4 Xen Xen 3.4.3 Xen Xen 3.4.2 Xen Xen 3.4.1 Xen Xen 3.4.0 Xen Xen 3.4 Xen Xen 3.3.2 Xen Xen 3.3.1 Xen Xen 3.3.0 Xen Xen 3.3 Xen Xen 3.2.3 Xen Xen 3.2.2 Xen Xen 3.2.1 Xen Xen 3.2.0 Xen Xen 3.2 Citrix XenServer 7.6 Citrix XenServer 7.5 Citrix XenServer 7.1 LTSR CU1 Citrix XenServer 7.0
Not Vulnerable:

XenServer Multiple Security Vulnerabilities

XenServer is prone to multiple security vulnerabilities.

Successful exploits allow attackers to execute arbitrary code in the context of the host operating system. Failed exploit attempts will result in a denial of service condition.

XenServer Multiple Security Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

XenServer Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

XenServer Multiple Security Vulnerabilities

References:

• Citrix Homepage (Citrix)
  
• Xen HomePage (Xen)
  
• Citrix XenServer Security Update (Citrix)
  
• insufficient TLB flushing / improper large page mappings with AMD IOMMUs (Xen)
  
• x86: DoS from attempting to use INVPCID with a non-canonical addresses (Xen)