CVE-2024-11149

In OpenBSD 7.4 before errata 014, vmm(4) did not restore GDTR limits properly on Intel (VMX) CPUs.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.9 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H
cisa-cgCNA
7.9 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 9%
VendorProductVersion
openbsdopenbsd
𝑥
< 7.4
openbsdopenbsd
7.4
openbsdopenbsd
7.4:errata_001
openbsdopenbsd
7.4:errata_002
openbsdopenbsd
7.4:errata_003
openbsdopenbsd
7.4:errata_004
openbsdopenbsd
7.4:errata_005
openbsdopenbsd
7.4:errata_006
openbsdopenbsd
7.4:errata_007
openbsdopenbsd
7.4:errata_008
openbsdopenbsd
7.4:errata_009
openbsdopenbsd
7.4:errata_010
openbsdopenbsd
7.4:errata_011
openbsdopenbsd
7.4:errata_012
openbsdopenbsd
7.4:errata_013
𝑥
= Vulnerable software versions
References
https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/014_vmm.patch.sig