PT-2017-7981 · Bhyve+1 · Bhyve+1

Felix Wilhelm · Publicado 2016-12-06 · Atualizado 2017-02-16 · CVE-2016-1889

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions bhyve versions 10.1 through 11.0

Description The issue is related to an integer overflow in the bhyve hypervisor when it is configured with a large amount of guest memory. This allows local users to gain privileges via a crafted device descriptor.

Recommendations For versions 10.1 through 11.0, consider restricting the amount of guest memory allocated to the bhyve hypervisor to minimize the risk of exploitation. As a temporary workaround, limit the use of crafted device descriptors until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

CVE-2016-1889

FREEBSD-SA-16_38

Produtos afetados

Freebsd

Bhyve

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-1889 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-1889 · Aviso do Fabricante
• http://securitytracker.com/id/1037400 · Nota
• https://freebsd.org/security/advisories/FreeBSD-SA-16:38.bhyve.asc · Aviso do Fabricante