Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : https://vigilance.fr/offer

SYNTHESIS OF THE VULNERABILITY

An attacker can use several vulnerabilities of Citrix XenServer.

Impacted products: XenServer.

Severity: 2/4.

Creation date: 25/01/2017.

DESCRIPTION OF THE VULNERABILITY

Several vulnerabilities were announced in Citrix XenServer.

An attacker can trigger a fatal error via Corrupt Host Database,
in order to trigger a denial of service. [severity:2/4;
CVE-2017-5572]

An attacker can trigger a fatal error via Cancel Tasks, in order
to trigger a denial of service. [severity:2/4; CVE-2017-5573]

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

https://vigilance.fr/vulnerability/Citrix-XenServer-two-vulnerabilities-21677