Vulnerabilità · 15 ore fa
Vates ha rilevato lo sfruttamento attivo di una vulnerabilità in Xen Orchestra e Xen Orchestra Appliance: l’accesso amministrativo può dare controllo sui pool gestiti, non solo sulla console. CSIRT-ITA ha aggiunto indicazioni di mitigazione e rilevamento. Una seconda falla consente anche a utenti con privilegi limitati di arrivare alla compromissione degli host XCP-ng.
Nella falla sfruttata, un cookie di accesso malformato viene trattato come una ricerca senza filtri: il sistema restituisce un token valido e riconosce l’attaccante come il suo proprietario. Per Xen Orchestra, le versioni correttive sono la 6.9.2 (stable) e la 6.10.1 (latest); sono vulnerabili le versioni precedenti nelle rispettive serie.
La compromissione può estendersi oltre il piano di gestione fino ai nodi XCP-ng. Correggere la console, da solo, non dimostra che i sistemi gestiti siano rimasti integri.
6 fonti che coprono questa storia
Vates: rilevato sfruttamento in rete di vulnerabilità in Xen Orchestra
Vates ha rilevato lo sfruttamento in rete di vulnerabilità che interessano Xen Orchestra e Xen Orchestra Appliance, soluzioni per la gestione centralizzata di infrastrutture di virtualizzazione basate su XCP-ng e Xen.
Critical Xen Orchestra Flaws Exploited in Attacks
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access
Hackers are exploiting a critical Xen Orchestra authentication bypass that can grant admin access and lead to XCP-ng node takeover.
Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers
A critical authentication bypass vulnerability in Xen Orchestra is being actively exploited in attacks that could grant administrator privileges and allow takeover of XCP-ng virtualization hosts.
X.Org patches eight server vulnerabilities a month after fixing 12 others - Help Net Security
X.Org server vulnerabilities fixed: eight flaws, one triggered by a malicious monitor. Update to xorg-server 21.1.26 and xwayland 24.1.15.
Zero Day Initiative Advisories
X.Org Server Font Alias Resolution Heap-based Buffer Overflow Privilege Escalation Vulnerability
X.Org Server Font Alias Resolution Heap-based Buffer Overflow Privilege Escalation Vulnerability Vulnerability Details This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server.
Zero Day Initiative Advisories
X.Org Server XkbResizeKeySyms Integer Overflow Privilege Escalation Vulnerability
X.Org Server XkbResizeKeySyms Integer Overflow Privilege Escalation Vulnerability Vulnerability Details This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server.
Zero Day Initiative Advisories
X.Org Server ProcDRI2GetBuffers Heap-based Buffer Overflow Privilege Escalation Vulnerability
X.Org Server ProcDRI2GetBuffers Heap-based Buffer Overflow Privilege Escalation Vulnerability Vulnerability Details This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server.
Zero Day Initiative Advisories
X.Org Server libXrender RenderQueryPictFormats Reply Heap-based Buffer Overflow Remote Code Execution Vulnerability Vulnerability Details This vulnerability allows remote attackers to execute arbitrary code on affected installations of X.Org Server.
Zero Day Initiative Advisories
X.Org Server libX11 XkbGetMap Reply Heap-based Buffer Overflow Remote Code Execution Vulnerability
X.Org Server libX11 XkbGetMap Reply Heap-based Buffer Overflow Remote Code Execution Vulnerability Vulnerability Details This vulnerability allows remote attackers to execute arbitrary code on affected installations of X.Org Server.
Part of the PlainSec briefing for 2026-11-12