Information Disclosure

github.com/moby/hyperkit is vulnerable to Information Disclosure. The vulnerability exists in the pcivtblkproc function of pcivirtioblock.c, which leads to the disclosure of host memory into the virtualized guest...

CVE-2021-32846 Moby HyperKit uninitialized memory use in virtio-sock pci_vtsock_proc_tx

HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107, function pcivtsockproctx in virtio-sock can lead to to uninitialized memory use. In this situation, there is a check for the return value to be less or equal to VTSOCKMAXSEGS, but that check is...

CVE-2021-32845 Moby HyperKit uninitialized memory use vtrnd pci_vtrnd_notify

HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior of HyperKit, the implementation of qnotify at pcivtrndnotify fails to check the return value of vqgetchain. This leads to struct iovec iov; being uninitialized and used to read memory i...