What’s Vulnerable › Vulnerabilities

CVE-2024-5661: Potential Denial of Service affecting XenServer and Citrix Hypervisor

• Severity: medium (CVSS 6.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-13 · updated 2026-06-17

Description

An issue has been identified in both XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR which may allow a malicious administrator of a guest VM to cause the host to become slow and/or unresponsive.

Affected products

• Citrix Hypervisor: 8.2-cumulative_update1
• Citrix XenServer: 8.0 (and their updates)
• Citrix Hypervisor: from 8 through 0; from 8.2 CU1 LTSR through XS82ECU1068
• Citrix XenServer: from 8 through 0; from 8.2 CU1 LTSR through XS82ECU1068

References

• https://support.citrix.com/article/CTX677100/xenserver-and-citrix-hypervisor-security-update-for-cve20245661
• https://support.citrix.com/article/CTX677100/xenserver-and-citrix-hypervisor-security-update-for-cve20245661

Get alerted when CVE-2024-5661 or the next vulnerability affects your stack