hipster.2018.04

DATE	CVE	VULNERABILITY TITLE	RISK
2020-09-25	CVE-2020-24718	Missing Authorization vulnerability in multiple products bhyve, as used in FreeBSD through 12.1 and illumos (e.g., OmniOS CE through r151034 and OpenIndiana through Hipster 2020.04), does not properly restrict VMCS and VMCB read/write operations, as demonstrated by a root user in a container on an Intel system, who can gain privileges by modifying VMCS_HOST_RIP. local low complexity freebsd omniosce openindiana netapp CWE-862	7.2