Vulnerabilities > Xhyve Project

DATE CVE VULNERABILITY TITLE RISK
2022-09-07 CVE-2022-36659 NULL Pointer Dereference vulnerability in Xhyve Project Xhyve 20211002
xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vi_pci_write().
network
low complexity
xhyve-project CWE-476
6.5
2022-09-07 CVE-2022-36660 Out-of-bounds Write vulnerability in Xhyve Project Xhyve 20211002
xhyve commit dfbe09b was discovered to contain a stack buffer overflow via the component pci_vtrnd_notify().
network
low complexity
xhyve-project CWE-787
critical
9.8
2022-09-07 CVE-2022-36661 NULL Pointer Dereference vulnerability in Xhyve Project Xhyve 20211002
xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vi_pci_read().
network
low complexity
xhyve-project CWE-476
6.5
2022-08-03 CVE-2022-35867 Stack-based Buffer Overflow vulnerability in Xhyve Project Xhyve 0.2.0
This vulnerability allows local attackers to escalate privileges on affected installations of xhyve.
local
low complexity
xhyve-project CWE-121
6.7