OpenCVE

An insufficient boundary validation in the USB code could lead to an out-of-bounds read on the heap, which could potentially lead to an arbitrary write and remote code execution.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Freebsd	Freebsd

No data.

No data.

References

Link	Providers
https://security.freebsd.org/advisories/FreeBSD-SA-24:15.bhyve.asc

History

Wed, 25 Sep 2024 14:30:00 +0000

Type	Values Removed	Values Added
Metrics	cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`	cvssV3_1 `{'score': 8.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Fri, 20 Sep 2024 18:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Freebsd Freebsd freebsd
CPEs		cpe:2.3:o:freebsd:freebsd::::::::
Vendors & Products		Freebsd Freebsd freebsd
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Fri, 20 Sep 2024 08:00:00 +0000

Type	Values Removed	Values Added
Description		An insufficient boundary validation in the USB code could lead to an out-of-bounds read on the heap, which could potentially lead to an arbitrary write and remote code execution.
Title		bhyve(8) out-of-bounds read access via XHCI emulation
Weaknesses		CWE-125
References		https://security.freebsd.org/advisories/FreeBSD-SA-24:15.bhyve.asc

MITRE

Status: PUBLISHED

Assigner: freebsd

Published: 2024-09-20T07:51:22.548Z

Updated: 2024-09-26T15:03:10.183Z

Reserved: 2024-08-27T16:30:55.996Z

Link: CVE-2024-41721

Vulnrichment

Updated: 2024-09-26T15:03:10.183Z

NVD

Status : Awaiting Analysis

Published: 2024-09-20T08:15:11.323

Modified: 2024-09-25T14:35:06.917

Link: CVE-2024-41721

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-41721", "assignerOrgId": "63664ac6-956c-4cba-a5d0-f46076e16109", "state": "PUBLISHED", "assignerShortName": "freebsd", "dateReserved": "2024-08-27T16:30:55.996Z", "datePublished": "2024-09-20T07:51:22.548Z", "dateUpdated": "2024-09-26T15:03:10.183Z"}, "containers": {"cna": {"datePublic": "2024-09-19T15:48:49.000Z", "title": "bhyve(8) out-of-bounds read access via XHCI emulation", "references": [{"tags": ["vendor-advisory"], "url": "https://security.freebsd.org/advisories/FreeBSD-SA-24:15.bhyve.asc"}], "affected": [{"defaultStatus": "unknown", "modules": ["umtx"], "product": "FreeBSD", "vendor": "FreeBSD", "versions": [{"lessThan": "p5", "status": "affected", "version": "14.1-RELEASE", "versionType": "release"}, {"lessThan": "p11", "status": "affected", "version": "14.0-RELEASE", "versionType": "release"}, {"lessThan": "p1", "status": "affected", "version": "13.4-RELEASE", "versionType": "release"}, {"lessThan": "p7", "status": "affected", "version": "13.3-RELEASE", "versionType": "release"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Synacktiv"}, {"lang": "en", "type": "sponsor", "value": "The FreeBSD Foundation"}, {"lang": "en", "type": "sponsor", "value": "The Alpha-Omega Project"}], "descriptions": [{"lang": "en", "value": "An insufficient boundary validation in the USB code could lead to an out-of-bounds read on the heap, which could potentially lead to an arbitrary write and remote code execution."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-125", "description": "CWE-125: Out-of-bounds Read", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "63664ac6-956c-4cba-a5d0-f46076e16109", "shortName": "freebsd", "dateUpdated": "2024-09-20T07:51:22.548Z"}}, "adp": [{"affected": [{"vendor": "freebsd", "product": "freebsd", "cpes": ["cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "14.1", "status": "affected", "lessThan": "14.1_p5", "versionType": "custom"}, {"version": "14.0", "status": "affected", "lessThan": "14.0_p11", "versionType": "custom"}, {"version": "13.4", "status": "affected", "lessThan": "13.4_p1", "versionType": "custom"}, {"version": "13.3", "status": "affected", "lessThan": "13.3_p7", "versionType": "custom"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-09-25T03:55:44.914860Z", "id": "CVE-2024-41721", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-25T13:13:22.795Z"}}, {"title": "CVE Program Container", "references": [{"url": "https://security.netapp.com/advisory/ntap-20240926-0009/"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-09-26T15:03:10.183Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://security.netapp.com/advisory/ntap-20240926-0009/"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-09-26T15:03:10.183Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-41721", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-09-25T03:55:44.914860Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*"], "vendor": "freebsd", "product": "freebsd", "versions": [{"status": "affected", "version": "14.1", "lessThan": "14.1_p5", "versionType": "custom"}, {"status": "affected", "version": "14.0", "lessThan": "14.0_p11", "versionType": "custom"}, {"status": "affected", "version": "13.4", "lessThan": "13.4_p1", "versionType": "custom"}, {"status": "affected", "version": "13.3", "lessThan": "13.3_p7", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-20T17:44:24.384Z"}}], "cna": {"title": "bhyve(8) out-of-bounds read access via XHCI emulation", "credits": [{"lang": "en", "type": "finder", "value": "Synacktiv"}, {"lang": "en", "type": "sponsor", "value": "The FreeBSD Foundation"}, {"lang": "en", "type": "sponsor", "value": "The Alpha-Omega Project"}], "affected": [{"vendor": "FreeBSD", "modules": ["umtx"], "product": "FreeBSD", "versions": [{"status": "affected", "version": "14.1-RELEASE", "lessThan": "p5", "versionType": "release"}, {"status": "affected", "version": "14.0-RELEASE", "lessThan": "p11", "versionType": "release"}, {"status": "affected", "version": "13.4-RELEASE", "lessThan": "p1", "versionType": "release"}, {"status": "affected", "version": "13.3-RELEASE", "lessThan": "p7", "versionType": "release"}], "defaultStatus": "unknown"}], "datePublic": "2024-09-19T15:48:49.000Z", "references": [{"url": "https://security.freebsd.org/advisories/FreeBSD-SA-24:15.bhyve.asc", "tags": ["vendor-advisory"]}], "descriptions": [{"lang": "en", "value": "An insufficient boundary validation in the USB code could lead to an out-of-bounds read on the heap, which could potentially lead to an arbitrary write and remote code execution."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-125", "description": "CWE-125: Out-of-bounds Read"}]}], "providerMetadata": {"orgId": "63664ac6-956c-4cba-a5d0-f46076e16109", "shortName": "freebsd", "dateUpdated": "2024-09-20T07:51:22.548Z"}}}, "cveMetadata": {"cveId": "CVE-2024-41721", "state": "PUBLISHED", "dateUpdated": "2024-09-26T15:03:10.183Z", "dateReserved": "2024-08-27T16:30:55.996Z", "assignerOrgId": "63664ac6-956c-4cba-a5d0-f46076e16109", "datePublished": "2024-09-20T07:51:22.548Z", "assignerShortName": "freebsd"}, "dataVersion": "5.1"}