XenServer and Citrix Hypervisor update for Xen



Risk High
Patch available YES
Number of vulnerabilities 1
CVE-ID CVE-2024-28956
CWE-ID CWE-399
Exploitation vector Local
Public exploit N/A
Vulnerable software
 Citrix XenServer
Server applications / Other server solutions

Citrix Hypervisor
Server applications / Virtualization software

Vendor Citrix

Security Bulletin

This security bulletin contains one high risk vulnerability.

1) Resource management error

EUVDB-ID: #VU109000

Risk: High

CVSSv4.0: 7.2 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:U/U:Amber]

CVE-ID: CVE-2024-28956

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

Description

The vulnerability allows a malicious guest to escalate privileges on the system.

The vulnerability exists due to an error in the hardware support for prediction-domain isolation dubbed "Indirect Target Selection". A malicious guest can infer the contents of arbitrary host memory, including memory assigned to other guests.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Citrix XenServer: 8.4

Citrix Hypervisor: 8.2 CU1

CPE2.3 External links

https://support.citrix.com/article/CTX693178


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###