Citrix Hypervisor Security Update

Citrix Hypervisor Security Update

book

Article ID: CTX316325

calendar_today

Updated On:

Description

Two security issues have been identified in Citrix Hypervisor 8.2 LTSR, each of which may allow privileged code in a guest VM to cause the host to crash or become unresponsive.  These issues only affect Citrix Hypervisor 8.2 LTSR.
These issues have the following CVE identifiers:

  • CVE-2021-3416
  • CVE-2021-20257
CVE IDDescriptionPre-conditions
CVE-2021-3416privileged code in a guest VM may cause the host to crash or become unresponsivemust be able to execute privileged code in the guest VM
CVE-2021-20257privileged code in a guest VM may cause the host to crash or become unresponsivemust be able to execute privileged code in the guest VM

Instructions

Citrix has released a hotfix to address these issues. Citrix recommends that affected customers install this hotfix as their patching schedule allows.  The hotfix can be downloaded from the following locations:
Citrix Hypervisor 8.2 LTSR: CTX310674 – https://support.citrix.com/article/CTX310674

Additional Information

DateChange
2021-06-23Initial Publication