EPSS
0.043%
Advisory Published
Updated

CVE-2024-5661: Potential Denial of Service affecting XenServer and Citrix Hypervisor

First published: Thu Jun 13 2024(Updated: )

An issue has been identified in both XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR which may allow a malicious administrator of a guest VM to cause the host to become slow and/or unresponsive.

Credit: secure@citrix.com

Affected SoftwareAffected VersionHow to fix
XenServer=8.0
Citrix Hypervisor=8.2-cumulative_update1

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of CVE-2024-5661?

    CVE-2024-5661 has been classified with a severity that indicates it could potentially lead to degraded performance of the host system.

  • How do I fix CVE-2024-5661?

    To remediate CVE-2024-5661, ensure to apply the latest security update provided by Citrix for XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR.

  • What are the potential impacts of CVE-2024-5661?

    The potential impacts of CVE-2024-5661 include the possibility of the host becoming slow and/or unresponsive due to malicious actions by a guest VM administrator.

  • Which versions are affected by CVE-2024-5661?

    CVE-2024-5661 affects XenServer version 8.0 and Citrix Hypervisor version 8.2 CU1 LTSR.

  • Who is primarily at risk for CVE-2024-5661?

    The primary risk posed by CVE-2024-5661 is to environments where untrusted administrators have access to guest VMs.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203