CVE-2024-5661: Potential Denial of Service affecting XenServer and Citrix Hypervisor

Published Jun 13, 2024
·
Updated

An issue has been identified in both XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR which may allow a malicious administrator of a guest VM to cause the host to become slow and/or unresponsive.

Affected Software

2 affected components
Citrix XenServer=8.0
Citrix Hypervisor=8.2-cumulative_update1

Event History

Jun 13, 2024
CVE Published
via MITRE·05:58 AM
Data Sourced
via MITRE·05:58 AM
Description
Data Sourced
via NVD·06:15 AM
DescriptionSeverityAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2024-5661?

CVE-2024-5661 has been classified with a severity that indicates it could potentially lead to degraded performance of the host system.

2

How do I fix CVE-2024-5661?

To remediate CVE-2024-5661, ensure to apply the latest security update provided by Citrix for XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR.

3

What are the potential impacts of CVE-2024-5661?

The potential impacts of CVE-2024-5661 include the possibility of the host becoming slow and/or unresponsive due to malicious actions by a guest VM administrator.

4

Which versions are affected by CVE-2024-5661?

CVE-2024-5661 affects XenServer version 8.0 and Citrix Hypervisor version 8.2 CU1 LTSR.

5

Who is primarily at risk for CVE-2024-5661?

The primary risk posed by CVE-2024-5661 is to environments where untrusted administrators have access to guest VMs.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203