CVE-2022-23092
Published: Feb 15, 2024
Modified: Feb 13, 2025
Description
The implementation of lib9p's handling of RWALK messages was missing a bounds check needed when unpacking the message contents. The missing check means that the receipt of a specially crafted message will cause lib9p to overwrite unrelated memory. The bug can be triggered by a malicious bhyve guest kernel to overwrite memory in the bhyve(8) process. This could potentially lead to user-mode code execution on the host, subject to bhyve's Capsicum sandbox.
| Vendor | Product | Versions |
|---|---|---|
FreeBSD | FreeBSD | affected 13.1-RELEASE - < p1affected 13.0-RELEASE - < p12 |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now