PT-2023-25067 · Bhyve+1 · Bhyve+1

Omri Ben Bassat + 1 · Publicado 2023-08-01 · Atualizado 2023-08-31 · CVE-2023-3494

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions bhyve (affected versions not specified)

Description A bug in the state machine implementation of the fwctl driver can result in a buffer overflowing when a guest VM copies a string into a buffer in the bhyve process' memory. This can be exploited by malicious, privileged software running in a guest VM to achieve code execution on the host in the bhyve userspace process, which typically runs as root. The risk is mitigated by the capabilities assigned through the Capsicum sandbox available to the bhyve process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Enumeração de Fraquezas

CWE-120

Identificadores relacionados

CVE-2023-3494

FREEBSD-SA-23_07

Produtos afetados

Freebsd

Bhyve

Referências · 5

• https://security.netapp.com/advisory/ntap-20230831-0006 · Nota
• https://osv.dev/vulnerability/CVE-2023-3494 · Aviso do Fabricante
• https://t.me/cvenotify/56009 · Publicação no Telegram
• https://security.freebsd.org/advisories/FreeBSD-SA-23:07.bhyve.asc · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-3494 · Nota de Segurança