PT-2010-4148 · Citrix · Citrix Xenserver

Published 2010-07-02 · Updated 2010-07-06 · CVE-2010-2619

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Low

Base vector

AV:L/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Citrix XenServer versions 5.0 Update 2 and earlier Citrix XenServer versions 5.5 Update 1 and earlier

Description The issue allows guest users to cause a denial of service in the host via unspecified vectors that trigger incorrectly set flags when using a pvops kernel.

Recommendations For Citrix XenServer versions 5.0 Update 2 and earlier, update to a version later than 5.0 Update 2 to resolve the issue. For Citrix XenServer versions 5.5 Update 1 and earlier, update to a version later than 5.5 Update 1 to resolve the issue.

Fix

Related Identifiers

CVE-2010-2619

Affected Products

Citrix Xenserver

References · 6

• http://support.citrix.com/article/CTX125319 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2619 · Security Note
• http://secunia.com/advisories/40282 · Vendor Advisory
• http://vupen.com/english/advisories/2010/1613 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2619 · Note
• http://securitytracker.com/id?1024157 · Note