Xhyve Project

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Xhyve Project records in CISA KEV

No Xhyve Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records

TI-2022-16934 CVE-2022-36660 · GHSA-vf3m-524r-w2p9

MEDIUM 44

xhyve commit dfbe09b was discovered to contain a stack buffer overflow via the component pci_vtrnd_notify().

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01042 Published 2022-09-07 No fix listed CWE-787

TI-2022-16935 CVE-2022-36661 · GHSA-f499-35rg-394j

LOW 30

xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vi_pci_read().

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00869 Published 2022-09-07 No fix listed CWE-476

TI-2022-16933 CVE-2022-36659 · GHSA-3hwm-6pxc-3vcf

LOW 30

xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vi_pci_write().

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00869 Published 2022-09-07 No fix listed CWE-476

TI-2022-16298 CVE-2022-35867 · GHSA-hpw9-grqm-8q7c

LOW 30

This vulnerability allows local attackers to escalate privileges on affected installations of xhyve.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00319 Published 2022-08-03 No fix listed CWE-121