USN-8172-1

Dashboard / Vulnerabilities / USN-8172-1

USN-8172-1

Summary: kvmtool vulnerabilities

Details: It was discovered that kvmtool did not properly manage memory under certain circumstances. A malicious guest attacker could use this issue to cause kvmtool to crash, leading to a denial of service, or possibly execute arbitrary code on the host system. (CVE-2021-45464) It was discovered that kvmtool incorrectly handled the 9p passthrough file system. A malicious guest attacker could possibly use this issue to open special files, escape the exported 9p tree, and execute arbitrary code on the host system. (CVE-2023-2861)

References: https://ubuntu.com/security/notices/USN-8172-1, https://ubuntu.com/security/CVE-2021-45464, https://ubuntu.com/security/CVE-2023-2861