Citrix Releases Security Update for Hypervisor

Security update addresses a vulnerability affecting Citrix Hypervisor

Threat ID:: CC-4148
Threat Severity:: Information only
Published:: 11 August 2022 1:51 PM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Security update addresses a vulnerability affecting Citrix Hypervisor

Affected platforms

The following platforms are known to be affected:

Versions: 7.1 LTSR CU2

Citrix Hypervisor

Threat details

Introduction

Citrix has released a security update to address a vulnerability affecting Citrix Hypervisor. The vulnerability known as CVE-2022-33745 could allow privileged code in a paravirtualised (PV) guest virtual machine (VM) to fail to perform management operations. An attacker could exploit this vulnerability to take control of an affected system.

Remediation advice

Affected organisations are encouraged to review Citrix Security Update CTX463455 and apply the relevant update.

Definitive source of threat updates

https://support.citrix.com/article/CTX463455/citrix-hypervisor-security-bulletin-for-cve202233745

CVE Vulnerabilities

Status Published

CVE-2022-33745

insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in shadow paging mode. To address XSA-401, code was moved inside a function in Xen. This code movement missed a variable changing meaning / value between old and new code positions. The now wrong use of the variable did lead to a wrong TLB flush condition, omitting flushes where such are necessary.

Last edited: 11 August 2022 1:51 pm