CVE-2024-5661

Name of the Vulnerable Software and Affected Versions Citrix Hypervisor versions 8.2 CU1 LTSR XenServer version 8

Description The issue is related to improper rate limiting in an endpoint, which may allow an attacker to cause a denial of service. A malicious administrator of a guest VM can exploit this to make the host slow and/or unresponsive.

Recommendations For Citrix Hypervisor version 8.2 CU1 LTSR, update to a version that includes the fix for this issue. For XenServer version 8, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the vulnerable endpoint to minimize the risk of exploitation.