Citrix Releases Security Update for Hypervisor

Threat ID:: CC-3893
Threat Severity:: Information only
Published:: 28 June 2021 11:16 AM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Affected platforms

The following platforms are known to be affected:

Citrix Hypervisor Versions: 8.2 LTSR and earlier

Threat details

Introduction

Citrix has released security updates to address vulnerabilities in Citrix Hypervisor that may allow privileged code in a guest virtual machine to cause the host to crash or become unresponsive. An attacker could exploit some of these vulnerabilities to cause a denial-of-service condition.

Remediation advice

Affected organisations are encouraged to review Citrix Hypervisor Security Update page and install the relevant hotfixes.

Remediation steps

Type	Step
Patch	Citrix Hypervisor 8.2 LTSR: CTX280214 (Hotfix 1 of 2) https://support.citrix.com/article/CTX310674?recommended
Patch	Citrix Hypervisor 8.2 LTSR: CTX316324 (Hotfix 2 of 2) https://support.citrix.com/article/CTX313807?recommended

Type

Step

Patch

Citrix Hypervisor 8.2 LTSR: CTX280214

(Hotfix 1 of 2)

https://support.citrix.com/article/CTX310674?recommended

Patch

Citrix Hypervisor 8.2 LTSR: CTX316324

(Hotfix 2 of 2)

https://support.citrix.com/article/CTX313807?recommended

CVE Vulnerabilities

Status Published

CVE-2021-3416

Privileged code in a guest VM may cause the host to crash or become unresponsive

Prerequisite: Must be able to execute privileged code in the guest VM

Status Reserved

CVE-2021-20257

Privileged code in a guest VM may cause the host to crash or become unresponsive

Prerequisite: Must be able to execute privileged code in the guest VM

Last edited: 28 June 2021 11:54 am