CVE-2021-32844mediumCWE-476

CVE-2021-32844: falha de média gravidade em moby hyperkit

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar hyperkit

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.2epss 0.2%
HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior of HyperKit, ` vi_pci_write` has is a call to `vc_cfgwrite` that does not check for null which when called makes the host crash. This issue may lead to a guest crashing the host causing a denial of service. This issue is fixed in commit 451558fe8aaa8b24e02e34106e3bb9fe41d7ad13.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
moby · hyperkit
CVEs relacionadas — moby hyperkit

No mesmo produto, das mais perigosas para as menos.

CVE-2021-32847HIGHMoby HyperKit uninitialized memory use in virtio-sock pci_vtsock_proc_txEPSS 0.4%CVE-2021-32846HIGHMoby HyperKit uninitialized memory use in virtio-sock pci_vtsock_proc_txEPSS 0.3%CVE-2021-32845HIGHMoby HyperKit uninitialized memory use vtrnd pci_vtrnd_notifyEPSS 0.3%CVE-2021-32843MEDIUMCVE-2021-32843EPSS 0.2%