QID 377779

Several security issues have been identified: CVE-2020-29479 : An attacker with the ability to execute privileged mode code in a guest can compromise the host CVE-2020-29480 : An attacker with the ability to execute privileged mode code in a guest can read non-sensitive metadata about another guest. CVE-2020-29481 : An attacker with the ability to execute privileged mode code in a guest can read data previously shared, using the Xenstore API, between two other guests. CVE-2020-29482 : An attacker with the ability to execute privileged mode code in a guest can perform a denial of service attack against the host. CVE-2020-29485 : An attacker with the ability to execute privileged mode code in a guest can perform a denial of service attack against the host. CVE-2020-29486 : An attacker with the ability to execute privileged mode code in a guest can perform a denial of service attack against the host or a selected other VM. CVE-2020-29487 : An attacker with the ability to execute privileged mode code in a guest can perform a denial of service attack against the host. CVE-2020-29568 : An attacker with the ability to execute privileged mode code in a guest can perform a denial of service attack against the host. CVE-2020-29569 : An attacker with the ability to execute privileged mode code in a guest can perform a denial of service attack against the host. CVE-2020-29570 : An attacker with the ability to execute privileged mode code in a guest can perform a denial of service attack against the host.

Affected Products:
Citrix XenServer 7.1 LTSR, Citrix XenServer 7.0 Note: This QID will detect only for Citrix XenServer 7.1 LTSR ,Citrix XenServer 7.0

QID Detection Logic (Authenticated):
OS:Citrix XenServer
The QID checks if Hotfixes is applied on the vulnerable versions of Citrix XenServer.

Vulnerable version could allow privileged code running in a guest VM to compromise the host or cause a denial of service.