CVE-2024-51562

Description

The NVMe driver function nvme_opc_get_log_page is vulnerable to a buffer over-read from a guest-controlled value.

Reserved 2024-10-29 | Published 2024-11-12 | Updated 2024-11-26 | Assigner freebsd

Problem types

CWE-125: Out-of-bounds Read

Product status

Default status
unknown

14.1-RELEASE before p6
affected

13.4-RELEASE before p2
affected

13.3-RELEASE before p8
affected

Credits

Synacktiv finder

The FreeBSD Foundation sponsor

The Alpha-Omega Project sponsor

References

security.freebsd.org/advisories/FreeBSD-SA-24:17.bhyve.asc vendor-advisory

cve.org (CVE-2024-51562)

nvd.nist.gov (CVE-2024-51562)

Download JSON