CVE-2024-5661: DoS in XenServer 8 & Citrix Hypervisor 8.2 CU1 via Guest VM
CVE-2024-5661 Published on June 13, 2024
Potential Denial of Service affecting XenServer and Citrix Hypervisor
An issue has been identified in both XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR which may allow a malicious administrator of a guest VM to cause the host to become slow and/or unresponsive.
Vulnerability Analysis
CVE-2024-5661 can be exploited with local system access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.
Products Associated with CVE-2024-5661
stack.watch emails you whenever new vulnerabilities are published in Citrix Xen Server or Citrix Hypervisor. Just hit a watch button to start following.
Affected Versions
Citrix Hypervisor:- Version 8, <= 0 is affected.
- Version 8.2 CU1 LTSR, <= XS82ECU1068 is affected.
- Version 8, <= 0 is affected.
- Version 8.2 CU1 LTSR, <= XS82ECU1068 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.