VDB
CVE-2024-45817
CVE-2024-45817
PUBLISHED
CVSS 8.699999809265137 HIGH
Xen ist ein Virtueller-Maschinen-Monitor (VMM), der Hardware (x86, IA-64, PowerPC) für die darauf laufenden Systeme (Domains) paravirtualisiert. Citrix XenServer ist eine Lösung für das Management, die Konfiguration und den Betrieb virtueller Maschinen auf Servern. Citrix Hypervisor ist eine Plattform für Desktop-, Server- und Cloud-Virtualisierungsinfrastrukturen.
EPSS 0.54% · 43.7th percentile
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.54%
43.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Citrix Systems | Citrix Systems Hypervisor <=8.2 CU1 LTSR | |
| Debian | Debian Linux | |
| Citrix Systems | Citrix Systems XenServer <=8 | |
| Fedora | Fedora Linux | |
| SUSE | SUSE Linux | |
| Open Source | Open Source Xen <xsa462.patch |
Timeline
- Sep 24, 2024 CVE Published
- Sep 25, 2024 PoC Published
- Sep 26, 2024 EPSS Score
- Oct 5, 2024 Coalition ESS Score
- Oct 16, 2024 EPSS Score
- Nov 5, 2024 EPSS Score
- Nov 25, 2024 EPSS Score
- Dec 15, 2024 EPSS Score
- Jan 4, 2025 EPSS Score
- Jan 24, 2025 EPSS Score
- Feb 13, 2025 EPSS Score
- Mar 5, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-2209.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-2209 advisory
- https://xenbits.xen.org/xsa/advisory-462.html advisory
- https://support.citrix.com/s/article/CTX691646-xenserver-and-citrix-hypervisor-security-update-for-cve202445817?language=en_US advisory
- https://seclists.org/oss-sec/2024/q3/265 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2024-020dbf247c advisory
- https://lists.suse.com/pipermail/sle-security-updates/2024-September/019510.html advisory
- https://lists.suse.com/pipermail/sle-security-updates/2024-September/019509.html advisory
- https://lists.suse.com/pipermail/sle-security-updates/2024-September/019508.html advisory
- https://lists.suse.com/pipermail/sle-security-updates/2024-September/019507.html advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2024-60809cb44e advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2024-051cf1553e advisory
- https://lists.suse.com/pipermail/sle-security-updates/2024-September/019519.html advisory
- https://lists.suse.com/pipermail/sle-security-updates/2024-October/019585.html advisory
- https://lists.suse.com/pipermail/sle-security-updates/2024-November/019811.html advisory
- https://lists.suse.com/pipermail/sle-security-updates/2024-November/019847.html advisory
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/7DDJIN2NQVRSUGDKCUPSGI662X3KHLZN/ advisory
- https://lists.debian.org/debian-security-announce/2024/msg00252.html advisory