Citrix Releases Security Update for Hypervisor

Security update addresses two vulnerabilities affecting Citrix Hypervisor

Threat ID:: CC-4187
Threat Severity:: Information only
Published:: 12 October 2022 4:30 PM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Security update addresses two vulnerabilities affecting Citrix Hypervisor

Affected platforms

The following platforms are known to be affected:

Versions: 8.2 LTSR CU1

Citrix Hypervisor

Threat details

Introduction

Citrix has released a security update to address two vulnerabilities affecting Citrix Hypervisor. The vulnerability known as CVE-2022-33748 could allow two malicious privileged users in separate guest VMs to cause the host to crash or become unresponsive. CVE-2022-33749 could allow a malicious unauthenticated user on the management network to cause the management service on the host to crash or become unresponsive.

An attacker could exploit these vulnerabilities to carry out a denial-of-service (DoS) attack.

Remediation advice

Affected organisations are encouraged to review Citrix Security Update CTX465146 and apply the relevant updates.

Remediation steps

Type	Step
Patch	Citrix Hypervisor \| Hotfix XS82ECU1016 https://support.citrix.com/article/CTX465169/hotfix-xs82ecu1016-for-citrix-hypervisor-82-cumulative-update-1
Patch	Citrix Hypervisor \| Hotfix XS82ECU1019 https://support.citrix.com/article/CTX466065/hotfix-xs82ecu1019-for-citrix-hypervisor-82-cumulative-update-1

Definitive source of threat updates

https://support.citrix.com/article/CTX465146/citrix-hypervisor-security-bulletin-for-cve202233748-cve202233749

CVE Vulnerabilities

Status Published

CVE-2022-33748

lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling path. While doing so, locking requirements were not paid attention to. As a result two cooperating guests granting each other transitive grants can cause locks to be acquired nested within one another, but in respectively opposite order. With suitable timing between the involved grant copy operations this may result in the locking up of a CPU.

Status Published

CVE-2022-33749

XAPI open file limit DoS It is possible for an unauthenticated client on the network to cause XAPI to hit its file-descriptor limit. This causes XAPI to be unable to accept new requests for other (trusted) clients, and blocks XAPI from carrying out any tasks that require the opening of file descriptors.

Last edited: 12 October 2022 4:30 pm