Citrix XenServer Security Update (CTX219378)

Citrix has released hotfixes to address multiple vulnerabilities affecting Citrix XenServer.

CVE-2016-9932- emulation on x86 CMPXCHG8B fails to disregard operand size override

CVE-2016-10024- mask interrupts may be possible on x86 PV guests

CVE-2016-10025- lack of NULL pointer check in VMFUNC

Affected Versions:

1)Citrix XenServer 7.0
2)Citrix XenServer 6.5 SP1
3)Citrix XenServer 6.2 SP1
4)Citrix XenServer 6.0.2 Common Criteria

Successful exploitation may result in a code execution and/or cause a denial of servie.

Hotfixes have been released to address these issues. Refer to CTX219378 to obtain more information.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

CTX219378: Citrix XenServer