From 7f941a9b8816f83d3975a29da316a5b75c3400a2 Mon Sep 17 00:00:00 2001 From: Philip Paeps Date: Wed, 25 Aug 2021 14:14:15 +0800 Subject: [PATCH] security/vuxml: add FreeBSD SA-21:13.bhyve --- security/vuxml/vuln-2021.xml | 33 +++++++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) diff --git a/security/vuxml/vuln-2021.xml b/security/vuxml/vuln-2021.xml index 4cb1e5d0ab51..512f2a41a99a 100644 --- a/security/vuxml/vuln-2021.xml +++ b/security/vuxml/vuln-2021.xml @@ -1,3 +1,36 @@ + + FreeBSD -- Missing error handling in bhyve(8) device models + + + FreeBSD + 13.013.0_4 + 12.212.2_10 + 11.411.4_13 + + + + +

Problem Description:

+

Certain VirtIO-based device models failed to handle errors when fetching + I/O descriptors. Such errors could be triggered by a malicious guest. + As a result, the device model code could be tricked into operating on + uninitialized I/O vectors, leading to memory corruption.

+

Impact:

+

A malicious guest may be able to crash the bhyve process. It may be + possible to exploit the memory corruption bugs to achieve arbitrary code + execution in the bhyve process.

+ + + + CVE-2021-29631 + SA-21:13.bhyve + + + 2021-08-24 + 2021-08-25 + + + OpenSSL -- multiple vulnerabilities