Vulnerability Details : CVE-2021-29631
In FreeBSD 13.0-STABLE before n246941-20f96f215562, 12.2-STABLE before r370400, 11.4-STABLE before r370399, 13.0-RELEASE before p4, 12.2-RELEASE before p10, and 11.4-RELEASE before p13, certain VirtIO-based device models in bhyve failed to handle errors when fetching I/O descriptors. A malicious guest may cause the device model to operate on uninitialized I/O vectors leading to memory corruption, crashing of the bhyve process, and possibly arbitrary code execution in the bhyve process.
Vulnerability category: Memory Corruption
Products affected by CVE-2021-29631
- cpe:2.3:o:freebsd:freebsd:12.2:-:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.2:p1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.2:p2:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.4:-:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.4:p1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.4:p2:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.4:p3:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.4:p4:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.4:p5:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.4:p6:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.4:p7:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.2:p3:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.4:p8:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.4:p9:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.2:p4:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.2:p5:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.2:p6:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:-:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.4:p10:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.4:p11:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.4:p12:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.4:p13:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.2:p10:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.2:p7:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.2:p8:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.2:p9:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:p1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:p2:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:p3:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2021-29631
0.04%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 10 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2021-29631
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.2
|
HIGH | AV:L/AC:L/Au:N/C:C/I:C/A:C |
3.9
|
10.0
|
NIST | |
|
7.8
|
HIGH | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
1.8
|
5.9
|
NIST |
CWE ids for CVE-2021-29631
-
The product uses or accesses a resource that has not been initialized.Assigned by: nvd@nist.gov (Primary)
References for CVE-2021-29631
-
https://security.FreeBSD.org/advisories/FreeBSD-SA-21:13.bhyve.asc
Vendor Advisory
-
https://security.netapp.com/advisory/ntap-20210923-0004/
CVE-2021-29631 FreeBSD Vulnerability in NetApp Products | NetApp Product SecurityThird Party Advisory
Jump to