漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
bhyve(8) privileged guest escape via TPM device passthrough
Vulnerability Description
Malicious software running in a guest VM can exploit the buffer overflow to achieve code execution on the host in the bhyve userspace process, which typically runs as root. Note that bhyve runs in a Capsicum sandbox, so malicious code is constrained by the capabilities available to the bhyve process.
CVSS Information
N/A
Vulnerability Type
跨界内存读
Vulnerability Title
FreeBSD 安全漏洞
Vulnerability Description
FreeBSD是FreeBSD基金会的一套类Unix操作系统。 FreeBSD 存在安全漏洞,该漏洞源于来宾 VM 中运行的恶意软件可以利用缓冲区溢出来在主机上的 bhyve 用户空间进程(通常以 root 身份运行)中实现代码执行。
CVSS Information
N/A
Vulnerability Type
N/A