Test ID:	1.3.6.1.4.1.25623.1.0.105528
Category:	Citrix Xenserver Local Security Checks
Title:	Citrix XenServer Multiple Security Updates (CTX203879)
Summary:	A number of security vulnerabilities have been; identified in Citrix XenServer that could, in certain configurations, allow a; malicious administrator of a guest VM to compromise the host or obtain potentially; sensitive information from other guest VMs. In addition, a vulnerability has been; identified that would allow certain applications running on a guest to cause that guest to crash.
Description:	Summary: A number of security vulnerabilities have been identified in Citrix XenServer that could, in certain configurations, allow a malicious administrator of a guest VM to compromise the host or obtain potentially sensitive information from other guest VMs. In addition, a vulnerability has been identified that would allow certain applications running on a guest to cause that guest to crash. Affected Software/OS: Citrix XenServer up to and including Citrix XenServer 6.5 Service Pack 1 Solution: Apply the hotfix referenced in the advisory. CVSS Score: 6.6 CVSS Vector: AV:L/AC:M/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-8554 BugTraq ID: 79579 http://www.securityfocus.com/bid/79579 https://security.gentoo.org/glsa/201604-03 http://www.securitytracker.com/id/1034481 Common Vulnerability Exposure (CVE) ID: CVE-2015-8104 BugTraq ID: 77524 http://www.securityfocus.com/bid/77524 BugTraq ID: 91787 http://www.securityfocus.com/bid/91787 Debian Security Information: DSA-3414 (Google Search) http://www.debian.org/security/2015/dsa-3414 Debian Security Information: DSA-3426 (Google Search) http://www.debian.org/security/2015/dsa-3426 Debian Security Information: DSA-3454 (Google Search) http://www.debian.org/security/2016/dsa-3454 http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172435.html http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172300.html http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172187.html http://www.openwall.com/lists/oss-security/2015/11/10/5 http://www.openwall.com/lists/oss-security/2023/10/10/4 RedHat Security Advisories: RHSA-2015:2636 http://rhn.redhat.com/errata/RHSA-2015-2636.html RedHat Security Advisories: RHSA-2015:2645 http://rhn.redhat.com/errata/RHSA-2015-2645.html RedHat Security Advisories: RHSA-2016:0046 http://rhn.redhat.com/errata/RHSA-2016-0046.html http://www.securitytracker.com/id/1034105 SuSE Security Announcement: SUSE-SU-2015:2108 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html SuSE Security Announcement: SUSE-SU-2015:2194 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html SuSE Security Announcement: SUSE-SU-2015:2339 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html SuSE Security Announcement: SUSE-SU-2015:2350 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html SuSE Security Announcement: SUSE-SU-2016:0354 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html SuSE Security Announcement: SUSE-SU-2016:2074 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html SuSE Security Announcement: openSUSE-SU-2015:2232 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html SuSE Security Announcement: openSUSE-SU-2015:2250 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-12/msg00053.html SuSE Security Announcement: openSUSE-SU-2016:1008 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html http://www.ubuntu.com/usn/USN-2840-1 http://www.ubuntu.com/usn/USN-2841-1 http://www.ubuntu.com/usn/USN-2841-2 http://www.ubuntu.com/usn/USN-2842-1 http://www.ubuntu.com/usn/USN-2842-2 http://www.ubuntu.com/usn/USN-2843-1 http://www.ubuntu.com/usn/USN-2843-2 http://www.ubuntu.com/usn/USN-2844-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-8555 BugTraq ID: 79543 http://www.securityfocus.com/bid/79543 Debian Security Information: DSA-3519 (Google Search) http://www.debian.org/security/2016/dsa-3519 http://www.securitytracker.com/id/1034477
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.