Citrix Releases Security Update for Hypervisor

Security update addresses a vulnerability affecting Citrix Hypervisor

Threat ID:: CC-4166
Threat Severity:: Information only
Published:: 14 September 2022 1:54 PM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Security update addresses a vulnerability affecting Citrix Hypervisor

Affected platforms

The following platforms are known to be affected:

Versions: 8.2 LTSR CU1

Citrix Hypervisor

Threat details

Introduction

Citrix has released a security update to address a vulnerability affecting Citrix Hypervisor. The vulnerability known as CVE-2020-35498 could allow malicious network traffic to cause subsequent packets to be dropped. An attacker could exploit this vulnerability to take control of an affected system.

Remediation advice

Affected organisations are encouraged to review Citrix Security Update CTX463901 and apply the relevant update.

Remediation steps

Type	Step
Patch	Citrix Hypervisor \| Hotfix XS82ECU1017 https://support.citrix.com/article/CTX463900/hotfix-xs82ecu1017-for-citrix-hypervisor-82-cumulative-update-1

Definitive source of threat updates

https://support.citrix.com/article/CTX463901/citrix-hypervisor-security-bulletin-for-cve202035498

CVE Vulnerabilities

Status Published

CVE-2020-35498

A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

Last edited: 14 September 2022 1:55 pm