A vulnerability was reported in Citrix XenServer. A local administrative user on the guest operating system can cause denial of service conditions.
Citrix XenServer 5.6 Feature Pack 1 and prior
A local administrative user on a guest operating system can interrupt the normal operation of the target hypervisor.
A number of denial of service vulnerabilities have been identified in Citrix XenServer. When triggered by an administrative user on a guest operating system, these vulnerabilities have the potential to cause an interruption to the normal operation of the Citrix XenServer hypervisor.
The vulnerabilities affect all currently supported versions of Citrix XenServer up to and including version 5.6 Feature Pack 1.
Hotfixes have been released to address the denial of service issues in all supported versions and update levels of the product. Citrix recommends that customers using Citrix XenServer identify the hotfixes that relate to their deployed Citrix XenServer environments, and apply all the relevant hotfixes:
For customers using Citrix XenServer 5.6 Feature Pack 1:
XenServer 5.6 Feature Pack 1
For customers using Citrix XenServer 5.6:
CTX129102: Citrix XenServer 5.6
CTX128844: Citrix XenServer 5.6
For customers using Citrix XenServer 5.5 Update 2:
XenServer 5.5 Update 2
For customers using Citrix XenServer 5.0 Update 3:
XenServer 5.0 Update 3