Lucene search

CVE-2020-24718

🗓️ 25 Sep 2020 04:04:23Reported by mitreType

bhyve in FreeBSD and illumos through 12.1 does not properly restrict VMCS and VMCB operations, allowing privilege escalation

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
nessus	FreeBSD : FreeBSD -- bhyve privilege escalation via VMCS access (2c5b9cd7-f7e6-11ea-88f8-901b0ef719ab)	17 Sep 202000:00	–	nessus
freebsd	FreeBSD -- bhyve privilege escalation via VMCS access	15 Sep 202000:00	–	freebsd
prion	Code injection	25 Sep 202004:23	–	prion
cvelist	CVE-2020-24718	25 Sep 202003:49	–	cvelist
nvd	CVE-2020-24718	25 Sep 202004:23	–	nvd
freebsd_advisory	FreeBSD-SA-20:28.bhyve_vmcs	15 Sep 202000:00	–	freebsd_advisory

Nvd

Node

freebsd freebsdRange≤11.2

freebsd freebsdMatch11.3-

freebsd freebsdMatch11.3p1

freebsd freebsdMatch11.3p10

freebsd freebsdMatch11.3p11

freebsd freebsdMatch11.3p12

freebsd freebsdMatch11.3p13

freebsd freebsdMatch11.3p2

freebsd freebsdMatch11.3p3

freebsd freebsdMatch11.3p4

freebsd freebsdMatch11.3p5

freebsd freebsdMatch11.3p6

freebsd freebsdMatch11.3p7

freebsd freebsdMatch11.3p8

freebsd freebsdMatch11.3p9

freebsd freebsdMatch11.3rc3

freebsd freebsdMatch11.4-

freebsd freebsdMatch11.4beta1

freebsd freebsdMatch11.4p1

freebsd freebsdMatch11.4p2

freebsd freebsdMatch11.4p3

freebsd freebsdMatch11.4rc1

freebsd freebsdMatch11.4rc2

freebsd freebsdMatch12.0-

freebsd freebsdMatch12.0p1

freebsd freebsdMatch12.0p10

freebsd freebsdMatch12.0p11

freebsd freebsdMatch12.0p12

freebsd freebsdMatch12.0p2

freebsd freebsdMatch12.0p3

freebsd freebsdMatch12.0p4

freebsd freebsdMatch12.0p5

freebsd freebsdMatch12.0p6

freebsd freebsdMatch12.0p7

freebsd freebsdMatch12.0p8

freebsd freebsdMatch12.0p9

freebsd freebsdMatch12.1-

freebsd freebsdMatch12.1p1

freebsd freebsdMatch12.1p2

freebsd freebsdMatch12.1p3

freebsd freebsdMatch12.1p4

freebsd freebsdMatch12.1p5

freebsd freebsdMatch12.1p6

freebsd freebsdMatch12.1p7

freebsd freebsdMatch12.1p8

freebsd freebsdMatch12.1p9

Node

omniosce omniosRange≤r151034community

Node

openindiana openindianaRange≤hipster_2020.04

Node

netapp clustered_data_ontapMatch-

Source	Link
github	www.github.com/illumos/illumos-gate/blob/84971882a96ac0fecd538b02208054a872ff8af3/usr/src/uts/i86pc/io/vmm/intel/vmcs.c
security	www.security.netapp.com/advisory/ntap-20201016-0002/
security	www.security.freebsd.org/advisories/FreeBSD-SA-20:28.bhyve_vmcs.asc

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

25 Sep 2020 04:23Current

8.2High risk

Vulners AI Score8.2

CVSS27.2

CVSS38.2

EPSS0.00101

CWE-862