search

MidnightBSD / src

MidnightBSD OS source code
https://www.midnightbsd.org/
Other
55 stars 6 forks source link

CVE-2024-51566 (High) detected in src3.1.5 #232

Open mend-bolt-for-github[bot] opened 6 days ago

mend-bolt-for-github[bot] commented 6 days ago

CVE-2024-51566 - High Severity Vulnerability

Vulnerable Library - src3.1.5

MidnightBSD OS source code

Library home page: https://github.com/MidnightBSD/src.git

Found in base branch: stable/3.2

Vulnerable Source Files (1)

Vulnerability Details

The NVMe driver queue processing is vulernable to guest-induced infinite loops.

Publish Date: 2024-11-12

URL: CVE-2024-51566

CVSS 3 Score Details (7.5)

Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: None - Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://www.freebsd.org/security/advisories/FreeBSD-SA-24:17.bhyve.asc

Release Date: 2024-11-12

Fix Resolution: 86ba5941b132

Step up your Open Source Security Game with Mend here