CVE-2024-25940

creationtimestamp| type| source ---|---|--- 2024-03-06 09:06:33+00:00| seen| https://t.me/ctinow/201133...

CVE-2024-25940

bhyveload -h may be used to grant loader access to the directory tree on the host. Affected versions of bhyveload8 do not make any attempt to restrict loader's access to , allowing the loader to read any file the host user has access to. In the bhyveload8 model, the host supplies a userboot.so to...

CVE-2024-25940 bhyveload(8) host file access

bhyveload -h may be used to grant loader access to the directory tree on the host. Affected versions of bhyveload8 do not make any attempt to restrict loader's access to , allowing the loader to read any file the host user has access to. In the bhyveload8 model, the host supplies a userboot.so to...

CVE-2024-25940

The bhyveload(8) utility in FreeBSD operating systems contains a design flaw where it fails to restrict loader access to the host-path directory tree provided via the -h flag. Because the host supplies a userboot.so but loader scripts typically originate from the guest image, a maliciously crafte...

CVE-2024-25940 bhyveload(8) host file access

bhyveload -h may be used to grant loader access to the directory tree on the host. Affected versions of bhyveload8 do not make any attempt to restrict loader's access to , allowing the loader to read any file the host user has access to. In the bhyveload8 model, the host supplies a userboot.so to...