CVE-2020-10565

grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, does not validate the address provided as part of a memrw command read or write by a guest through a grub2.cfg file. This allows an untrusted guest to perform arbitrary read or write operations in the context of the grub-bhy...

PT-2020-12208

Name of the Vulnerable Software and Affected Versions grub2-bhyve versions prior to revision 525916 2020-02-12 Description The issue is related to the mishandling of font loading by a guest through a grub2.cfg file, leading to a buffer overflow. Recommendations For versions prior to revision 5259...

PT-2020-12207

Name of the Vulnerable Software and Affected Versions grub2-bhyve versions prior to revision 525916 2020-02-12 Description The issue allows an untrusted guest to perform arbitrary read or write operations in the context of the grub-bhyve process, resulting in code execution as root on the host OS...