Vulnerabilities

TI-2022-16935 CVE-2022-36661 · GHSA-f499-35rg-394j

xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the…

LOW 30

xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vi_pci_read().

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00869 Published 2022-09-07 No fix listed CWE-476

TI-2022-16934 CVE-2022-36660 · GHSA-vf3m-524r-w2p9

MEDIUM 44

xhyve commit dfbe09b was discovered to contain a stack buffer overflow via the component pci_vtrnd_notify().

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01042 Published 2022-09-07 No fix listed CWE-787

TI-2022-16933 CVE-2022-36659 · GHSA-3hwm-6pxc-3vcf

LOW 30

xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vi_pci_write().

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00869 Published 2022-09-07 No fix listed CWE-476

TI-2022-16298 CVE-2022-35867 · GHSA-hpw9-grqm-8q7c

LOW 30

This vulnerability allows local attackers to escalate privileges on affected installations of xhyve.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00319 Published 2022-08-03 No fix listed CWE-121