Detections
Analytics
Citrix XenServer Multiple Vulnerabilities (CTX200288)
critical Nessus Plugin ID 79745
Language:
Synopsis
The remote device is missing a vendor-supplied security patch.Description
The remote host is running a version of Citrix XenServer that is affected by multiple vulnerabilities :- A local privilege escalation vulnerability exists due to improperly restricted access to 'PHYSDEVOP_{prepare,release}_msix' operations by unprivileged guests. An attacker with access to a guest operating system can exploit this issue to gain elevated privileges on affected computers. (CVE-2014-1666)
- A local privilege escalation vulnerability exists due to missing privilege level checks in x86 emulation of far branches. This flaw exists in the CALL, JMP, and RETF instructions in the Intel assembly syntax, and the LCALL, LJMP, and LRET instructions in the AT&T syntax.
An attacker with access to a guest operating system can exploit this issue to gain elevated privileges on affected computers. (CVE-2014-8595)
- A denial of service vulnerability exists due to a failure to restrict access to the hypercall argument translation feature. An attacker with access to a guest operating system can crash the host with excessive checks on the final register state for 32-bit guests running on a 64-bit hypervisor. (CVE-2014-8866)
- A denial of service vulnerability exists due to insufficient bounding of 'REP MOVS' to MMIO emulated inside of the hypervisor. This flaw affects the 'hvm_mmio_intercept()' function in 'intercept.c'. An attacker with access to a guest operating system can exploit this issue to crash the host.
(CVE-2014-8867)
Solution
Apply the relevant hotfix referenced in the vendor advisory.See Also
Plugin Details
Severity: Critical
ID: 79745
File Name: citrix_xenserver_CTX200288.nasl
Version: 1.7
Type: local
Family: Misc.
Published: 12/5/2014
Updated: 11/25/2019
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.0
CVSS v2
Risk Factor: High
Base Score: 8.3
Temporal Score: 6.1
Vector: CVSS2#AV:A/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2014-1666
CVSS v3
Risk Factor: Critical
Base Score: 9
Temporal Score: 7.8
Vector: CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:citrix:xenserver
Required KB Items: Host/XenServer/version, Host/local_checks_enabled
Exploit Ease: No known exploits are available
Patch Publication Date: 11/18/2014
Vulnerability Publication Date: 11/18/2014
Reference Information
CVE: CVE-2014-1666, CVE-2014-8595, CVE-2014-8866, CVE-2014-8867