Citrix Releases Security Update For Critical PuTTY Vulnerability In Hypervisor 

There is a critical vulnerability (CVE-2024-31497) in certain versions of Citrix’s Hypervisor virtualization platform that has been disclosed in a security bulletin from Citrix. An issue that stems from XenCenter, the management console for Citrix Hypervisors, has been identified, containing a vulnerable version of PuTTY SSH.Previous versions of XenCenter for Citrix Hypervisor 8.2 CU1 Long Term Service Release (LTSR) included PuTTY for SSH connections between XenCenter and the guest virtual machines.
The NIST P-521 curve was used by PuTTY before 0.81 to generate ECDSA encryption keys.The vulnerability could allow an attacker who controls a guest VM to determine the SSH private key of the XenCenter administrator who authenticates to the compromised VM over SSH.