EUVD-2024-23242

Malicious code in bioql PyPI...

The vulnerability of the bhyveload utility in FreeBSD operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the bhyveload module in FreeBSD is related to an incorrect limitation on the path name to the host-path directory with restricted access. Exploiting this vulnerability allows a remote attacker to gain unauthorized access to protected information by loading a specially crafted...

CVE-2024-25940

bhyveload -h may be used to grant loader access to the directory tree on the host. Affected versions of bhyveload8 do not make any attempt to restrict loader's access to , allowing the loader to read any file the host user has access to. In the bhyveload8 model, the host supplies a userboot.so to...

CVE-2024-25940

bhyveload -h may be used to grant loader access to the directory tree on the host. Affected versions of bhyveload8 do not make any attempt to restrict loader's access to , allowing the loader to read any file the host user has access to. In the bhyveload8 model, the host supplies a userboot.so to...

Design/Logic Flaw

bhyveload -h may be used to grant loader access to the directory tree on the host. Affected versions of bhyveload8 do not make any attempt to restrict loader's access to , allowing the loader to read any file the host user has access to. In the bhyveload8 model, the host supplies a userboot.so to...

CVE-2024-25940 bhyveload(8) host file access

bhyveload -h may be used to grant loader access to the directory tree on the host. Affected versions of bhyveload8 do not make any attempt to restrict loader's access to , allowing the loader to read any file the host user has access to. In the bhyveload8 model, the host supplies a userboot.so to...

CVE-2024-25940 bhyveload(8) host file access

bhyveload -h may be used to grant loader access to the directory tree on the host. Affected versions of bhyveload8 do not make any attempt to restrict loader's access to , allowing the loader to read any file the host user has access to. In the bhyveload8 model, the host supplies a userboot.so to...

CVE-2024-25940

The bhyveload(8) utility in FreeBSD contains a vulnerability where the -h option fails to restrict the loader's access to the specified directory tree. This allows a loader to read any file on the host that the user running bhyveload(8) (often root ) can access. A maliciously crafted script from...

FreeBSD : FreeBSD -- bhyveload(8) host file access (c62285cb-cb46-11ee-b609-002590c1f29c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the c62285cb-cb46-11ee-b609-002590c1f29c advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...

PT-2024-1817 · Freebsd · Bhyveload +1

Name of the Vulnerable Software and Affected Versions: bhyveload versions prior to the fixed version Description: The issue is related to the bhyveload module in FreeBSD, which is associated with incorrect restriction of the host-path directory name with limited access. This could allow a remote...

FreeBSD -- bhyveload(8) host file access

Problem Description: bhyveload -h may be used to grant loader access to the directory tree on the host. Affected versions of bhyveload8 do not make any attempt to restrict loader's access to , allowing the loader to read any file the host user has access to. Impact: In the bhyveload8 model, the...

FreeBSD-SA-24:01.bhyveload

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-24:01.bhyveload Security Advisory The FreeBSD Project Topic: bhyveload8 host file access Category: core Module: bhyeload Announced: 2024-02-14 Credits: The wate...