CVE-2014-3798: Input Validation

Published Jul 11, 2019

Updated

The Windows Guest Tools in Citrix XenServer 6.2 SP1 and earlier allows remote attackers to cause a denial of service (guest OS crash) via a crafted Ethernet frame.

Affected Software

4 affected components

Citrix XenServer=6.0

Citrix XenServer=6.0.2

Citrix XenServer=6.1.0

Citrix XenServer=6.2.0

Remediation

Patch Available

http://support.citrix.com/article/CTX140814

Event History

Jul 11, 2019

CVE Published

via MITRE·07:14 PM

Data Sourced

via MITRE·07:14 PM

Description

Frequently Asked Questions

What is CVE-2014-3798?

CVE-2014-3798 is a vulnerability in the Windows Guest Tools in Citrix XenServer 6.2 SP1 and earlier that allows remote attackers to cause a denial of service (guest OS crash) via a crafted Ethernet frame.

How severe is CVE-2014-3798?

CVE-2014-3798 has a severity rating of 6.5 (Medium).

Which software versions are affected by CVE-2014-3798?

Citrix XenServer 6.0, 6.0.2, 6.1.0, and 6.2.0 are affected by CVE-2014-3798.

How can I fix CVE-2014-3798?

To fix CVE-2014-3798, update Citrix XenServer to a version that is not affected by the vulnerability.

Where can I find more information about CVE-2014-3798?

You can find more information about CVE-2014-3798 on the following references: [Secunia Advisory](http://secunia.com/advisories/58455), [Citrix Support Article](http://support.citrix.com/article/CTX140814), [SecurityFocus BID](http://www.securityfocus.com/bid/67693).