Improper access control

Missing access control restrictions in the Hypervisor component of the ACRN Project v2.0 and v1.6.1 allow a malicious entity, with root access in the Service VM userspace, to abuse the PCIe assign/de-assign Hypercalls via crafted ioctls and payloads. This attack results in a corrupt state and...

CVE-2020-15687

Missing access control restrictions in the Hypervisor component of the ACRN Project v2.0 and v1.6.1 allow a malicious entity, with root access in the Service VM userspace, to abuse the PCIe assign/de-assign Hypercalls via crafted ioctls and payloads. This attack results in a corrupt state and...

CVE-2020-15687

The affected software is the ACRN Project Hypervisor (versions 2.0 and 1.6.1). The vulnerability arises from missing access control restrictions in the Hypervisor component, enabling a malicious entity with root access in the Service VM userspace to abuse PCIe assign/de-assign Hypercalls via craf...

CVE-2020-15687: Undefined Security Weakness

Missing access control restrictions in the Hypervisor component of the ACRN Project v2.0 and v1.6.1 allow a malicious entity, with root access in the Service VM userspace, to abuse the PCIe assign/de-assign Hypercalls via crafted ioctls and payloads. This attack results in a corrupt state and...

PT-2020-14584

Name of the Vulnerable Software and Affected Versions ACRN Project versions 1.6.1 through 2.0 Description The issue is related to missing access control restrictions in the Hypervisor component, allowing a malicious entity with root access in the Service VM userspace to abuse the PCIe...

ACRN Denial of Service Vulnerability

ACRN is an open source virtual machine monitor for the Internet of Things. A security vulnerability exists in versions prior to ACRN 2019w25.5-140,000p. An attacker can exploit the vulnerability to cause a denial of service assertion failure...

CVE-2019-18844

The Device Model in ACRN before 2019w25.5-140000p relies on assert calls in devicemodel/hw/pci/core.c and devicemodel/include/pcicore.h instead of other mechanisms for propagating error information or diagnostic information, which might allow attackers to cause a denial of service assertion failu...

Code injection

The Device Model in ACRN before 2019w25.5-140000p relies on assert calls in devicemodel/hw/pci/core.c and devicemodel/include/pcicore.h instead of other mechanisms for propagating error information or diagnostic information, which might allow attackers to cause a denial of service assertion failu...

CVE-2019-18844

The Device Model in ACRN before 2019w25.5-140000p relies on assert calls in devicemodel/hw/pci/core.c and devicemodel/include/pcicore.h instead of other mechanisms for propagating error information or diagnostic information, which might allow attackers to cause a denial of service assertion failu...

CVE-2019-18844

The Device Model in ACRN before 2019w25.5-140000p relies on assert calls in devicemodel/hw/pci/core.c and devicemodel/include/pcicore.h instead of other mechanisms for propagating error information or diagnostic information, which might allow attackers to cause a denial of service assertion failu...

CVE-2019-18844

ACRN Device Model (pre-2019w25.5-140000p) is affected by a denial-of-service condition caused by using asserts in PCI core code (devicemodel/hw/pci/core.c and devicemodel/include/pci_core.h) to propagate errors/diagnostic information. The issue can trigger an assertion failure in the PCI core. Th...

CVE-2019-18844: Reachable Assertion

The Device Model in ACRN before 2019w25.5-140000p relies on assert calls in devicemodel/hw/pci/core.c and devicemodel/include/pcicore.h instead of other mechanisms for propagating error information or diagnostic information, which might allow attackers to cause a denial of service assertion failu...

PT-2019-15696

Name of the Vulnerable Software and Affected Versions ACRN versions prior to 1.2 ACRN versions prior to 2019w25.5-140000p Description The issue is related to the Device Model in ACRN, where assert calls in devicemodel/hw/pci/core.c and devicemodel/include/pci core.h are used instead of other...