Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : http://vigilance.fr/offer

SYNTHESIS OF THE VULNERABILITY

An attacker can use several vulnerabilities of Citrix XenServer.

Impacted products: XenServer

Severity: 2/4

Creation date: 16/07/2014

DESCRIPTION OF THE VULNERABILITY

Several vulnerabilities were announced in Citrix XenServer.

An attacker can generate a buffer overflow in Citrix XenServer HVM
Graphics Console, in order to trigger a denial of service, and
possibly to execute code. [severity:2/4; CVE-2014-4947]

An attacker can alter VHD, in order to trigger a denial of service
or to obtain information. [severity:2/4; CVE-2014-4948]

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

http://vigilance.fr/vulnerability/Citrix-XenServer-two-vulnerabilities-15055