CVE-2016-1889

Integer overflow in the bhyve hypervisor in FreeBSD 10.1, 10.2, 10.3, and 11.0 when configured with a large amount of guest memory, allows local users to gain privilege via a crafted device descriptor.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 13%
VendorProductVersion
freebsdfreebsd
10.1
freebsdfreebsd
10.2
freebsdfreebsd
10.3
freebsdfreebsd
11.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securitytracker.com/id/1037400
https://www.freebsd.org/security/advisories/FreeBSD-SA-16:38.bhyve.asc
http://www.securitytracker.com/id/1037400
https://www.freebsd.org/security/advisories/FreeBSD-SA-16:38.bhyve.asc