CVE-2024-51565 is a medium severity vulnerability in the FreeBSD operating system affecting the hda driver. It involves a buffer over-read caused by a guest-controlled value, which could lead to information disclosure and partial denial of service. The flaw affects specific FreeBSD release versions 13.3-RELEASE, 13.4-RELEASE, and 14.1-RELEASE. No public exploits or patches are currently documented.
CVE-2024-51564 is a vulnerability in the FreeBSD operating system's hda audio driver where a guest can trigger an infinite loop. This flaw is due to improper validation of specified index, position, or offset in input, classified as CWE-1285. The vulnerability affects FreeBSD versions 13.3-RELEASE, 13.4-RELEASE, and 14.1-RELEASE. It has a CVSS 3.1 score of 7.5, indicating high severity, with an impact on availability but no confidentiality or integrity loss. No public exploits or patches are currently documented.
CVE-2024-51563 is a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the virtio_vq_recordon function of FreeBSD. It affects FreeBSD versions 13.3-RELEASE, 13.4-RELEASE, and 14.1-RELEASE. The flaw could allow an attacker to cause limited impact on confidentiality and availability without requiring privileges or user interaction. The vulnerability has a medium severity rating with a CVSS score of 6.5.
CVE-2024-51562 is a medium severity vulnerability in the FreeBSD NVMe driver where the function nvme_opc_get_log_page can perform an out-of-bounds read due to a guest-controlled value. This flaw can lead to information disclosure and potential system instability.
CVE-2024-45063 is a critical Use-After-Free vulnerability in FreeBSD affecting versions 13.3-RELEASE, 14.0-RELEASE, and 14.1-RELEASE. It arises from incorrect flag handling in the ctl_write_buffer function, leading to kernel memory corruption. Exploitation can occur via malicious software running in a guest VM exposing virtio_scsi, potentially allowing code execution on the host's bhyve userspace process, which runs with root privileges but within a Capsicum sandbox. Additionally, a malicious iSCSI initiator could achieve remote code execution on the iSCSI target host. The vulnerability has a CVSS 3.1 score of 9.8, indicating critical severity.
CVE-2024-43110 is an out-of-bounds read vulnerability in FreeBSD's ctl_request_sense function that can expose kernel heap bytes to userspace. It affects FreeBSD versions 13.3-RELEASE, 14.0-RELEASE, and 14.1-RELEASE. Malicious software running in a guest VM with virtio_scsi can exploit this to execute code on the host's bhyve userspace process, which runs with root privileges but within a Capsicum sandbox. Additionally, a malicious iSCSI initiator could achieve remote code execution on the iSCSI target host. The vulnerability has a high severity with a CVSS score of 8.4.
CVE-2024-42416 is a high severity vulnerability in FreeBSD affecting versions 13.3-RELEASE, 14.0-RELEASE, and 14.1-RELEASE. It involves insufficient validation in the ctl_report_supported_opcodes function, allowing an arbitrary write to kernel heap memory. This flaw can be exploited by malicious software running in a guest VM exposing virtio_scsi to achieve code execution in the bhyve userspace process, which runs with root privileges but within a Capsicum sandbox. Additionally, a malicious iSCSI initiator could achieve remote code execution on the iSCSI target host.
CVE-2024-8178 is a critical vulnerability in FreeBSD where the ctl_write_buffer and ctl_read_buffer functions allocate memory without initializing it. This flaw can be exploited by malicious software running in a guest VM exposing virtio_scsi to execute code on the host's bhyve userspace process, which runs with root privileges but within a Capsicum sandbox. Additionally, a malicious iSCSI initiator could achieve remote code execution on the iSCSI target host. The vulnerability affects FreeBSD versions 13.3-RELEASE, 14.0-RELEASE, and 14.1-RELEASE.