PT-2017-7981 · Bhyve+1 · Bhyve+1

Felix Wilhelm · Published 2016-12-06 · Updated 2017-02-16 · CVE-2016-1889

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions bhyve versions 10.1 through 11.0

Description The issue is related to an integer overflow in the bhyve hypervisor when it is configured with a large amount of guest memory. This allows local users to gain privileges via a crafted device descriptor.

Recommendations For versions 10.1 through 11.0, consider restricting the amount of guest memory allocated to the bhyve hypervisor to minimize the risk of exploitation. As a temporary workaround, limit the use of crafted device descriptors until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2016-1889

FREEBSD-SA-16_38

Affected Products

Freebsd

Bhyve

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-1889 · Security Note
• https://osv.dev/vulnerability/CVE-2016-1889 · Vendor Advisory
• https://freebsd.org/security/advisories/FreeBSD-SA-16:38.bhyve.asc · Vendor Advisory
• http://securitytracker.com/id/1037400 · Note