====================================================================

                             CERT-Renater

                  Note d'Information No. 2012/VULN393
____________________________________________________________________

DATE                : 02/10/2012

HARDWARE PLATFORM(S): /


OPERATING SYSTEM(S) : Systems running Citrix NetScaler SDX versions
                          9.3.x, 10.0.x.

======================================================================
http://support.citrix.com/article/CTX134876
______________________________________________________________________

 Citrix NetScaler SDX Multiple Security Updates

Document ID: CTX134876   /   Created On: 1 oct. 2012   /   Updated On: 1
oct. 2012



Severity: High

Description of Problem

A number of security vulnerabilities have been identified in Citrix
NetScaler SDX. These vulnerabilities affect all 9.3.x and 10.0.x
versions of NetScaler SDX running XenServer versions up to and
including 6.0.0.

The following denial of service and guest-to-host privilege escalation
vulnerabilities have been addressed:

    • hypercall physdev_get_free_pirq vulnerability (CVE-2012-3495)

    • PHYSDEVOP_map_pirq index vulnerability (CVE-2012-3498)

    • Qemu VT100 emulation vulnerability (CVE-2012-3515)

    • Grant table entry swaps have inadequate bounds checking
(CVE-2012-3516)

    • HVM guest user mode MMIO emulation DoS vulnerability (CVE-2012-3432)

    • HVM guest destroy p2m teardown host DoS vulnerability (CVE-2012-3433)

    • hypercall set_debugreg vulnerability (CVE-2012-3494)

    • XENMEM_populate_physmap DoS vulnerability (CVE-2012-3496)

    • PV guest console vulnerability (CVE-2012-4606)

What Customers Should Do

Citrix has released XenServer hotfixes for NetScaler SDX to address
these issues. Citrix strongly recommends that customers using Citrix
NetScaler SDX apply these hotfixes to their appliances as soon as
possible. These hotfixes can be found at the following locations:

Security Hotfix XS60E001: http://support.citrix.com/article/CTX131214

Security Hotfix XS60E018: http://support.citrix.com/article/CTX134752

Customers requiring information on how to apply these hotfixes to their
NetScaler SDX appliances should review the configuration document on
the Knowledgebase at the following address:

http://support.citrix.com/article/CTX135034


Acknowledgements

Citrix thanks James Forshaw of Context IS (www.contextis.com) for
working with us to protect Citrix customers.

What Citrix Is Doing

Citrix is notifying customers and channel partners about this potential
security issue. This article is also available from the Citrix
Knowledge Center at http://support.citrix.com/.

Obtaining Support on This Issue

If you require technical assistance with this issue, please contact
Citrix Technical Support. Contact details for Citrix Technical Support
are available at http://www.citrix.com/site/ss/supportContacts.asp.

Reporting Security Vulnerabilities to Citrix

Citrix welcomes input regarding the security of its products and
considers any and all potential vulnerabilities seriously. If you would
like to report a security issue to Citrix, please compose an e-mail to
secure@citrix.com stating the exact version of the product in which the
vulnerability was found and the steps needed to reproduce the
vulnerability.

This document applies to:

    NetScaler SDX 10
    NetScaler SDX 9.3



======================================================================

=========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
=========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44          +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41          +
+ 75013 Paris           | email: certsvp@renater.fr     +
=========================================================