Information Disclosure

2023-03-0104:17:22

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

pci_vtblk_proc

pci_virtio_block.c

github.com/moby/hyperkit

information disclosure

host memory

virtualized guest

0.0004 Low

EPSS

Percentile

15.5%

JSON

github.com/moby/hyperkit is vulnerable to Information Disclosure. The vulnerability exists in the pci_vtblk_proc function of pci_virtio_block.c, which leads to the disclosure of host memory into the virtualized guest.

CPENameOperatorVersion
github.com/moby/hyperkitlev0.20210107
github.com/moby/hyperkitlev0.20210107

CPE	Name	Operator	Version
	github.com/moby/hyperkit	le	v0.20210107
	github.com/moby/hyperkit	le	v0.20210107

References

github.com/moby/hyperkit/blob/2f061e447e1435cdf1b9eda364cea6414f2c606b/src/lib/pci_virtio_block.c#L316

github.com/moby/hyperkit/commit/cf60095a4d8c3cb2e182a14415467afd356e982f

github.com/moby/hyperkit/pull/318

securitylab.github.com/advisories/GHSL-2021-058-moby-hyperkit/

0.0004 Low

EPSS

Percentile

15.5%

JSON

Related for VERACODE:39470