CVE-2024-25940

creationtimestamp| type| source ---|---|--- 2024-03-06 09:06:33+00:00| seen| https://t.me/ctinow/201133...

CVE-2024-25940

bhyveload -h may be used to grant loader access to the directory tree on the host. Affected versions of bhyveload8 do not make any attempt to restrict loader's access to , allowing the loader to read any file the host user has access to. In the bhyveload8 model, the host supplies a userboot.so to...

CVE-2024-25940 bhyveload(8) host file access

bhyveload -h may be used to grant loader access to the directory tree on the host. Affected versions of bhyveload8 do not make any attempt to restrict loader's access to , allowing the loader to read any file the host user has access to. In the bhyveload8 model, the host supplies a userboot.so to...

CVE-2024-25940 bhyveload(8) host file access

bhyveload -h may be used to grant loader access to the directory tree on the host. Affected versions of bhyveload8 do not make any attempt to restrict loader's access to , allowing the loader to read any file the host user has access to. In the bhyveload8 model, the host supplies a userboot.so to...

CVE-2024-25940

The bhyveload(8) utility in FreeBSD contains a vulnerability where the -h option fails to restrict the loader's access to the specified directory tree. This allows a loader to read any file on the host that the user running bhyveload(8) (often root ) can access. A maliciously crafted script from...